|
Home > Archive > IIS Server Security > June 2007 > Access Denied: Obtaining a Server Certificate from Your Own CA
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Access Denied: Obtaining a Server Certificate from Your Own CA
|
|
| overthetop 2007-06-08, 1:24 pm |
| Hi
I'm running Windows XP and i'm trying to get a web server cert (to run
ssl) from a CA installed on my network on windows 2003.
The CA on the win 2003's machine is working because i've managed to
install a cert on the iis on that machine, but when i try to make a
cert request from my xp machine to that CA at the end of the iis
request cert wizard i get "Failed to install certificate. Access
denied.". Am I doing something wrong? How can I make it right?
I follow this tutorial: http://www.petri.co.il/configure_ss...te_with_iis.htm
and after step 15 i get the fail message.
| |
| Ken Schaefer 2007-06-11, 1:18 am |
| What happens if you choose to "save the request and submit it later"?
And then you submit the request manually to the Certificate Server? and then
manually approve the certificate?
Cheers
Ken
--
My IIS Blog: www.adOpenStatic.com/cs/blogs/ken
"overthetop" <vanko.georgiev@gmail.com> wrote in message
news:1181305483.239900.35100@e65g2000hsc.googlegroups.com...
> Hi
>
> I'm running Windows XP and i'm trying to get a web server cert (to run
> ssl) from a CA installed on my network on windows 2003.
> The CA on the win 2003's machine is working because i've managed to
> install a cert on the iis on that machine, but when i try to make a
> cert request from my xp machine to that CA at the end of the iis
> request cert wizard i get "Failed to install certificate. Access
> denied.". Am I doing something wrong? How can I make it right?
> I follow this tutorial:
> http://www.petri.co.il/configure_ss...te_with_iis.htm
> and after step 15 i get the fail message.
>
| |
| overthetop 2007-06-11, 7:19 am |
| On Jun 11, 8:05 am, "Ken Schaefer" <kenREM...@THISadOpenStatic.com>
wrote:[vbcol=seagreen]
> What happens if you choose to "save the request and submit it later"?
>
> And then you submit the request manually to the Certificate Server? and then
> manually approve the certificate?
>
> Cheers
> Ken
>
> --
> My IIS Blog:www.adOpenStatic.com/cs/blogs/ken
>
> "overthetop" <vanko.georg...@gmail.com> wrote in message
>
> news:1181305483.239900.35100@e65g2000hsc.googlegroups.com...
>
>
Hi Ken
I submitted the request manually and installed the cert on my computer
successfully but there is a new problem now. The SSL is still not
working. When I browse a site on my iis the browser won't accept the
web server cert that I've just installed?! FireFox tells me that can
not establish encrypted connection to the web server because the
certificate is invalid or corrupted: Error Code -8101 and after
clicking ok the page is not displayed. When I try the same thing with
IE it tells me that the page can not be found and no warning.
What is the problem with this cert? It's installed on the server and
no error till I browse https://...
I request the cert by browsing the CA server: http://CAServer/certsrv
and follow the steps, then download it and install it on the web
server.
| |
| overthetop 2007-06-11, 7:19 am |
| On Jun 11, 10:56 am, overthetop <vanko.georg...@gmail.com> wrote:
> On Jun 11, 8:05 am, "Ken Schaefer" <kenREM...@THISadOpenStatic.com>
> wrote:
>
>
>
>
>
>
>
>
>
>
>
> Hi Ken
>
> I submitted the request manually and installed the cert on my computer
> successfully but there is a new problem now. The SSL is still not
> working. When I browse a site on my iis the browser won't accept the
> web server cert that I've just installed?! FireFox tells me that can
> not establish encrypted connection to the web server because the
> certificate is invalid or corrupted: Error Code -8101 and after
> clicking ok the page is not displayed. When I try the same thing with
> IE it tells me that the page can not be found and no warning.
> What is the problem with this cert? It's installed on the server and
> no error till I browse https://...
> I request the cert by browsing the CA server:http://CAServer/certsrv
> and follow the steps, then download it and install it on the web
> server.
Is it possible that the problem is in the CA server? When I installed
the CA service I didn't change nothing in the config and now it's
running with default settings. Is there something that needs to be
configured?
|
|
|
|
|