Hi

I want to ass SSL authentication to one of our Web Sites. The site is hosted
on a server in our DMZ but will be made available to our customers.

I have installed Microsoft Certificate services on this server but when I
try to set up SSL I am only given the Option to prepare the request to send
to a Certification Authority. The option to apply to an Online
authentication authority immediately is greyed out.

I have another site on the same server which has a Veri Sign SSL
certificate. (That would not cause a problem, would it?)

This is a Windows 2000 Server SP4 with IIS5

It is possible that I have not installed the Certification Services properly
but it did look as if it installed OK.

Any help appreciated.

Thank you.

Re: Apply to Online Certification Authority by David

David
Fri Aug 26 08:31:04 CDT 2005

I'm not certain why you install Certificate Server for any of this...

If this is for customers, then you need to use a real certificate that is
trusted by the customer's browsers. Your Certificate Server will not be
trusted by the customer and is useless.

As for testing purposes, SelfSSL is easy to use for that purpose. Give it a
Website ID and some name/expiration parameters, and bam your website allows
SSL. Untrusted, of course, but you can quickly turn into production by
purchasing a real SSL Certificate.

See the following blog entry for an explanation on what is going on and how
it works:
http://blogs.msdn.com/david.wang/archive/2005/08/02/Free_SSL_on_IIS.aspx

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Kevan" <Kevan@discussions.microsoft.com> wrote in message
news:367D83D6-60C0-4A2C-B41E-BEF2F9EBCA97@microsoft.com...
Hi

I want to ass SSL authentication to one of our Web Sites. The site is hosted
on a server in our DMZ but will be made available to our customers.

I have installed Microsoft Certificate services on this server but when I
try to set up SSL I am only given the Option to prepare the request to send
to a Certification Authority. The option to apply to an Online
authentication authority immediately is greyed out.

I have another site on the same server which has a Veri Sign SSL
certificate. (That would not cause a problem, would it?)

This is a Windows 2000 Server SP4 with IIS5

It is possible that I have not installed the Certification Services properly
but it did look as if it installed OK.

Any help appreciated.

Thank you.



Re: Apply to Online Certification Authority by Kevan

Kevan
Fri Aug 26 10:46:45 CDT 2005

David

Thanks for your reply.
I read your Blog and applied for a Free SSL from CACert.org. This tested
fine and I will apply for a real certificate when the site goes live.

Best regards.

Kevan

"David Wang [Msft]" wrote:

> I'm not certain why you install Certificate Server for any of this...
>
> If this is for customers, then you need to use a real certificate that is
> trusted by the customer's browsers. Your Certificate Server will not be
> trusted by the customer and is useless.
>
> As for testing purposes, SelfSSL is easy to use for that purpose. Give it a
> Website ID and some name/expiration parameters, and bam your website allows
> SSL. Untrusted, of course, but you can quickly turn into production by
> purchasing a real SSL Certificate.
>
> See the following blog entry for an explanation on what is going on and how
> it works:
> http://blogs.msdn.com/david.wang/archive/2005/08/02/Free_SSL_on_IIS.aspx
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
> "Kevan" <Kevan@discussions.microsoft.com> wrote in message
> news:367D83D6-60C0-4A2C-B41E-BEF2F9EBCA97@microsoft.com...
> Hi
>
> I want to ass SSL authentication to one of our Web Sites. The site is hosted
> on a server in our DMZ but will be made available to our customers.
>
> I have installed Microsoft Certificate services on this server but when I
> try to set up SSL I am only given the Option to prepare the request to send
> to a Certification Authority. The option to apply to an Online
> authentication authority immediately is greyed out.
>
> I have another site on the same server which has a Veri Sign SSL
> certificate. (That would not cause a problem, would it?)
>
> This is a Windows 2000 Server SP4 with IIS5
>
> It is possible that I have not installed the Certification Services properly
> but it did look as if it installed OK.
>
> Any help appreciated.
>
> Thank you.
>
>
>