Groups | Blog | Home
all groups > iis security > november 2004 >

iis security : Acquiring Certificates


rjolivie
11/23/2004 11:43:02 PM
I have gone through the request for certificate wizard in IIS.

It's not really clear about who to send the request to. I went to
Verisign's website and purchasing a certificate is EXPENSIVE!!!

Is there anyway to do this free or cheap? How can I get a free/cheap
certificate???

Thanks
rjolivie
11/24/2004 12:17:31 AM

Thanks... I dl'ed the iis resource tools 6.0 (however I'm only running
5.1). It said that some functions might not work propperly.

Once the file was installed, I have access to several .exe files, but
selfssl is not one of them. A) do you know if this is a side affect of using
the 6.0 pack on a 5.1 version... or B) am I trying to access selfssl
impropperly?

Thanks again
rjolivie
11/24/2004 12:19:02 AM

Sorry to keep replying to myself... I have installed MS certificate
services. I see a list of certificates. However when I go into IIS manager
and select "choose an existing certificate" none of these are listed.

I tried copying a certificate to a different directory and then clicking
"install certificate". It says Installation complete, but then there is
still no certificate in the IIS certificate window?

I seem to be struggling alot with this. Sorry! (and thanks so much)

Leon Mayne [MVP]
11/24/2004 3:10:00 PM
[quoted text, click to view]

IPSCA offer free 6 month SSL certs:
http://certs.ipsca.com/

Ken Schaefer
11/24/2004 6:54:57 PM
If you want something that's trusted by the general public, then try one of
the cheaper public CAs, like Geotrust: www.geotrust.com

If this is just for internal use, or your own use, then you can either:
a) create a self-signed certificate using SelfSSL from the IIS Resource Kit
tools [1]
-or-
b) setup MS Certificate Services [2]

Cheers
Ken

[1]
http://www.microsoft.com/downloads/details.aspx?FamilyID=56fc92ee-a71a-4c73-b628-ade629c89499&DisplayLang=en
[2] http://support.microsoft.com/?id=299525

[quoted text, click to view]

Ken Schaefer
11/24/2004 8:26:34 PM
Hi,

If you are using MS Certificate Services, follow the steps in this PDF:
http://www.adopenstatic.com/resources/books/293_CYA_IIS6_05.pdf
<plug>
it's from a book I co-authored. If you find it useful, you might want to
consider buying the book :-)
</plug>

It may be that you are installing the wrong type of certificate, or not
following the steps correctly.

Cheers
Ken

[quoted text, click to view]

AddThis Social Bookmark Button