Hi!

I've a IIS 6 installation and need to generate an CSR to sign this CSR
with an enterprise CA based on OpenSSL.

All works fine and I can generate an CSR using the wizzard. The signing
works fine too and the certificate can be used for SSL encryption.

But I want to generate an CSR which includes an email address in the
field "email Address".

Is it possible to include an email address in the CSR?
In older versions of IIS there was an input field for the email address.

How can i generate an CSR with email address for IIS 6?

Thanks a lot in advance for any hints.

Regards.
Tobias Kastner

Re: How to generate CRS including an email address in IIS 6 ? by Ken

Ken
Wed Apr 30 01:28:10 CDT 2008

Instead of using the IIS wizard, use certutil.exe

Cheers
Ken

"Tobias Kastner" <tobias.kastner@gmx.de> wrote in message
news:67p5glF2q89mtU1@mid.individual.net...
> Hi!
>
> I've a IIS 6 installation and need to generate an CSR to sign this CSR
> with an enterprise CA based on OpenSSL.
>
> All works fine and I can generate an CSR using the wizzard. The signing
> works fine too and the certificate can be used for SSL encryption.
>
> But I want to generate an CSR which includes an email address in the
> field "email Address".
>
> Is it possible to include an email address in the CSR?
> In older versions of IIS there was an input field for the email address.
>
> How can i generate an CSR with email address for IIS 6?
>
> Thanks a lot in advance for any hints.
>
> Regards.
> Tobias Kastner
>


Re: How to generate CRS including an email address in IIS 6 ? by Tobias

Tobias
Thu May 08 11:40:18 CDT 2008

Hi Ken!

> Instead of using the IIS wizard, use certutil.exe
>
> Cheers
> Ken

Thank´s a lot for your fast answer. I can now create an signing request
with an email address and sign this request with openssl.

But how can i import the signed certificate to use it with IIS?

Regards.
Tobias


Re: How to generate CRS including an email address in IIS 6 ? by Ken

Ken
Thu May 08 21:46:55 CDT 2008

Use the Certificates MMC console:

Start -> Run -> MMC
Add Snapin
Certificates snapin
Point it to the computer store
Import the Cert into the Personal Certificates store

Now, you need to update the IIS metabase (either programmatically or using
Metabase Explorer) and set the SSLCertHash property to be the thumbprint of
the SSL certificate you just imported e.g. see:
http://www.adopenstatic.com/cs/blogs/ken/archive/2006/03/26/123.aspx

Cheers
Ken


"Tobias Kastner" <tobias.kastner@gmx.de> wrote in message
news:68gopgF2s8s34U1@mid.individual.net...
> Hi Ken!
>
>> Instead of using the IIS wizard, use certutil.exe
>>
>> Cheers
>> Ken
>
> Thank´s a lot for your fast answer. I can now create an signing request
> with an email address and sign this request with openssl.
>
> But how can i import the signed certificate to use it with IIS?
>
> Regards.
> Tobias
>