How to create a web server SSL certificate manually

re: How to create a web server SSL certificate manually

MS2065 [MSFT] — Mon, 27 Dec 2010 09:51:26 GMT

To issue a certificate to your TMG box, see technet.microsoft.com/.../cc302625.aspx.

Withouth seeing the actual certificate request, it's impossible to say why the CA is ignoring it. What does the eventlog say?

re: How to create a web server SSL certificate manually

Rafael Monteiro — Sun, 26 Dec 2010 16:57:21 GMT

I know it's a different topic, but the issue is related....Let me explain what I'm trying to do.

I'm trying to create a certificate for exchange server 2010 outlook anywhere.

I create de .req file on EMC and try to submit it using the certification authority on administrative tools, submit new request, i select the .req file created using exchange emc, but nothing happens. Nothing appears on "Pending requests" or "failed requests"....

When I go to MMC, Certificates, Computer certificates, and request a certificate from there, It works, I add a service for the certificate, in this case, iis since i'm trying to get outlook anywhere to work, and the certificate to my computer account on my tmg....add the certificate to my web listener...it recognizes my certificate as a valid one, but when i test it, i show the message that my target principal name is incorrect....since i never issued a certificate like this, possibly, there's something wrong with the information i'm adding.... requesting the certificate using the .reg file would make everything easy.....maybe i don't know where to look, but i don't see anything related to this matter in event viewer....

Do you have any ideas why the certificates I'm trying do submit using MMC Certification Authority using the .req file are not been issued?

Thanks for your help, and, I'm sorry for my english....It's not my first language, and I not really good at it...

re: How to create a web server SSL certificate manually

MS2065 [MSFT] — Sun, 26 Dec 2010 13:51:54 GMT

From Windows Server 2008 and on you cannot request computer certificates through the web enrollment pages anymore. See also technet.microsoft.com/.../cc732517(WS.10).aspx and search for "computer certificate"

re: How to create a web server SSL certificate manually

Rafael Monteiro — Sat, 25 Dec 2010 21:31:20 GMT

I'm running Windows Server 2008 R2 fully updated.... Any ideias? I can request certificates from mmc console -> certificates >request a new certificate.... Recently I installed Lync Server, and had no problem requesting certificates....The problem is only with the web enrollment interface....

I don't know where to look anymore... I'm almost installing a now CA on my environment just to request this certificate.... Any ideias??? Tks for your help...

re: How to create a web server SSL certificate manually

MS2065 [MSFT] — Sat, 25 Dec 2010 12:09:07 GMT

Rafael, what OS version is the CA running on?

re: How to create a web server SSL certificate manually

Rafael Monteiro — Fri, 24 Dec 2010 17:58:36 GMT

I'm having trouble requesting a new certificating using web enrollment page, with the error THAT NOT CERTIFICATE TEMPLATES COULD BE FOUND, and already followed all the solutions saying i should set the permissions on the certificates templates, and checking adsiedit config dnshostname with the file on windows\system32\certsrv and nothing worked....I tried requesting the certificate using command line, and I'm receiving the message Certificate not issued (Incomplete)... nothing else..... any ideias?

re: How to create a web server SSL certificate manually

MS2065 [MSFT] — Tue, 16 Mar 2010 09:05:15 GMT

The [Strings] and [Extensions] sections are NOT understood by the certreq version shipping with Windows XP.

re: How to create a web server SSL certificate manually

MS2065 [MSFT] — Tue, 16 Mar 2010 09:01:37 GMT

Could you please share the INF file that you have used. You only have to change the Subject attribute from the above sample.

re: How to create a web server SSL certificate manually

visert — Mon, 15 Mar 2010 13:23:05 GMT

One more question. When I'm creating certificate using Windows Server 2008, could be possible that it is not compatible with windows XP?

re: How to create a web server SSL certificate manually

visert — Mon, 15 Mar 2010 08:27:34 GMT

Hi, I can't finish second step. Got an error on certreq –new ssl.inf ssl.req command:

Active Directory Enrollment Policy

{164AF455-2832-4C63-989C-069F3EA3B675}

ldap:

Certificate Request Processor: The string contains an invalid X500 name attribut

e key, oid, value or delimiter. 0x80092023 (-2146885597)

cert.inf([NewRequest] Subject = "MySub")

Could you please list mandatory parameters and those I have to change for my server?