Forum Discussion

salayhin's avatar
salayhin
Copper Contributor
Apr 30, 2017

Cannot enable SSL in windows 2012 server

I am trying to enable SSL in windows 2012 server. I am following https://www.digicert.com/ssl-certificate-installation-microsoft-iis-8.htm.

 

I have signed crt file and I convert crt to cer file for windows machine. I follow this step to https://support.sonicwall.com/kb/sw13147.

 

But after adding cer file, cannot find certificate in the list when I go to another menu and come back to certificate list. Do I miss anything ?

 

windows server

1 Reply

  • Myron Cramer's avatar
    Myron Cramer
    Copper Contributor
    May 04, 2017

    I find it easy to import externally generated SSL certificates using openssl to create a private key, and a certificate request, then fulfill the request from either a Microsoft Certificate Server or from a commercial provider.

     

    I convert the key and certificate to pfx format and copy it to the server. The IIS Server Certificate menu shown in your link easily imports the certificate.

     

    You can also use mmc with the certificates snap-in to import the pfx certificate into to roles you want to use it for. Here are the commands.

     

    Launch OpenSSL application
        C:\OpenSSL-Win32\bin>openssl

    set OPENSSL_CONF=c:\OpenSSL-Win32\bin\openssl.cfg
    HOST = your hostname
        
    PROCESS

    STEP 1: Generating RSA private key for CA (2048 bit)

        openssl genrsa -des3 -out HOST.key
        
    STEP 2: Generating X.509 certificate signing request for CA

        openssl req -new -key HOST.key -out HOST.csr

    STEP 3: Generate HOST cetificate from Microsoft Certificate Service on CA or from commercial provider. Cut and paste from HOST.csr
        
        Download new certificates  HOST.cer
        
    STEP 4: Create PEM Certificate (PKCS12, PFX)

        openssl pkcs12 -export -out HOST.pfx -inkey HOST.key -in HOST.cer

Resources