|
| Hey all
I know this is more of a security issue. But since I'm integrating it with
Biztalk I figure to give this a shot here.
I'm newbie when it comes to security, so please bear with me.
Basically, I'm trying to set things up so that clients would connect to my
asp.net web site (.aspx) vias https, which is essentially a custom Biztalk
HTTP adapter.
I have been following the following links closely to accomplish this:
http://support.microsoft.com/kb/816794
http://support.microsoft.com/defaul...kb;en-us;324069
My problem (as far as I know) is two-fold:
i) I am unable to select the 'Server Certificate' (it is shaded out) when I
follow the steps below as outlined in one of the links above:
Assign the Imported Certificate to the Web Site
1. Click Start, point to Administrative Tools, and then click Internet
Information Services (IIS) Manager.
2. In the left pane, click your server.
3. In the right pane, double-click Web Sites.
4. In the right pane, right-click the Web site you want to assign the
certificate to, and then click Properties.
5. Click Directory Security, and then click Server Certificate.
6. On the Welcome to the Web Certificate Wizard page, click Next.
7. On the Server Certificate page, click Assign an existing
certificate, and then click Next.
8. On the Available Certificates page, click the installed certificate
you want to assign to this Web site, and then click Next.
9. On the SSL Port page, configure the SSL port number. The default
port of 443 is appropriate for most situations.
10. Click Next.
11. On the Certificate Summary page, review the information about the
certificate, and then click Next.
12. On the Completing the Web Server Certificate Wizard page, click
Finish, and then click OK.
Anybody know why this is the case?
ii) I suspect (possibly incorrectly) that I might not have a certificate
installed in the Windows 2003 certificate store. I was able to generate,
issue, and store a certificate in a .cer file. However, what oid (i.e.
usage) should I use for the certificate generation? Currently I'm using
1.3.6.1.4.1.311.2.1.21, which represents a client-browser certificate. Is
this correct for what I'm trying to do? Also, once the certificate is
generated, should I store it under the 'personal' folder?
Any feedbacks that you guys can give me would be awesome and highly
appreciated!
Thanks,
Paul
|
|