IIS with SSL and Certificates........Help

[racer514]

Newby here again. This time with an IIS question relating to SSL and certificates. (91 days IT experience and 1 day IIS expereice) Here it is:

Have internal website for testing. Using it to learn how to implement SSL to make it more secure. Set up a Windows 2000 Certificate Authority (CA) and seems OK. No warnings so far and we can get to and get/install certificates. OK

Now I go to IIS for the site (on the same machine as the CA)
and install the certificate with the wizard on the "Administrative" website. Figured I would try it there first to avoid access problems to our site which we need. I could always do the administrative s--t from the machine if I have a problem. Anyway, the certificate installs OK with no problems and the status is OK after the install. At this point I can access the admin pages through a browser with the port switch (

http://servername:port#).

Last, I go to the properties pages/tabs for the admin site and to security, and to edit, and click require SSL. I didn't even go to 128bit yet, just left it standard. Now when I try accessing the admin site from the browser using http:// I get the "need

https://"

warning and when I use "

https://"

it just hangs for about 5 minutes or longer and never gets to the site.

Any ideas?????? Need more info let me know.

Oh yeah, I know what you are all thinking. I did enter port 443 for SSL.

 

[jwalz]

I am having the same problem with my web site. My twist is that I can access it just fine from within my building. But from the outside world, it hangs and then quits and never prompts for login authentication.

How did you solve your problem?

Thanks in advance
JWalz

 

[Gislason]

Hello

Your problem is related to your server certificate.

I have resolved a similar problem by performing the following steps:

1) Remove the current certificate
2) Generate a new request file
3) Have Certificate Services sign the request and issue a certificate (or apply for a server certificate from e.g. VeriSign)
4) Install the new certificate

How to do this? Try and look at the information in

http://support.microsoft.com/support/kb/articles/q265/8/47.asp

best regards
hg