Unable to setup SSL using IIS4.0

[ITProfessional]

I have installed certificate server from OPtion pack. I am using the instructions in the article on microsoft site Q218445 "How to configure certificate server for Use with SSL on IIS.
Now the prob is: When ever i go to client and try to install it, it says http error 403.4;required ssl. If try to use https instead of http with same url it says page couldnot be found. Now if I go back to the server and go to key manager and uncheck the box "require secure connection", then I can go to the page using http hearder. But i cannot go using https header so that i can select the certificate and then install it to use my secure site.
I am using sp6a(high encryption on the server).
Any help will be highly appriciated.
thanks
Kamran Khan

 

[epohl]

Did you make sure the browser on the client is setup to use SSL? In Internet explorer 5 it is under tools, interent options, advanced.

 

[ITProfessional]

yes I checked it says "use ssl 2.0 and ssl3.0

 

[epohl]

When you created the certificate request did you use a Fully qualified domain name like server.domain.com or did you just use servername? Which ever way you chose is how the server must be accessed. So if you choose servername.domain.com for your certificate and tried to connect using just servername in your browser it would fail.

 

[ITProfessional]

Yes i am using fully qualified name. infact i had tried both. you know the prob is strange. If i type the url

http://<servername.domain.com>,

it says error 403.4 ssl required.
it means that page is there and it is configured for SSL.
Now if try to use

https://<servername.domain.com>

it says 'page couldnot be found'.

thanks

 

[epohl]

Was this server upgraded from a previous version of IIS? If so this article may resolve your problem.

http://support.microsoft.com/support/kb/articles/Q289/5/82.ASP

 

[ITProfessional]

No, I installed IIS4.0 on this NT Box. for your info, it is a PDC, does it make any diff?

 

[epohl]

If you selected require client certificates, deselect this while leaving require ssl enabled. Also what service pack are you running?

 

[Ovatvvon]

Also, this may sound stupid...but are you sure that your web services are setup correctly, to include your pages? It sounds to me like it's working with

https://,

but just can't find the page. I think your ssl is setup correct, you just need to get the iis setup along with your pages. (could be wrong, but that's what it sounds like to me)
-Ovatvvon :-Q

 

[ITProfessional]

for ephol:
===========
Yes I have tried that, i selected &quot;accept client certificate&quot; but it didnot work. I am using sp6a(high encryption)

for Otatvvan:
=============
my web sites are set correct. cus if go to MMC, then go to key manager and then Uncheck &quot;require ssl&quot; option, they i can go to the web site with http. it means that web site is working.