Where do I install SSL Certificates?
Hi
I am currently running severs as listed below. I am new to this company and have been sent SSL certificates to upgrade and I haven't got a clue where to start as I have never had to do this before.
I know that it has to go on an IIS part of the server but am unsure as to where to start. We also have access to Exchange over the internet.
3Com
LAN View
3Com
VLAN
ADSL
Internet Access via BT BB
Bloxx
Proxy Service
Linux
AAA - VPN Authentication
Win 2K3
Active Directory
Win 2K3
Exchange Server
Win 2K3
File
Win 2K3
Print Service
Win 2K3
Win 2K3
Network Backup
Win 2K3
Kaspersky
2000 Pro
ActiveSMS
XP Pro
(T&A)
Wi-Fi
WebCam
Wi-Fi
Wi-Fi
AS 400e i
B
Win 2K
MSSQL
3Com
VLAN
NT 4
Various
NT
Domain Controller
Win 2K
Citrix Farm
Win 2K
Citrix Farm
Win 2K
Citrix Farm
Win 2K
File Server
July 15th, 2010 12:25pm
Cooky,
Prior to deploying any certs, you'll want to get familar with the AD CS for Windows Server
http://msdn.microsoft.com/en-us/library/aa376539(VS.85).aspx
http://technet.microsoft.com/en-us/library/cc772393(WS.10).aspx
As far as being sent SSL certs, were they sent by a outside venodor, like Thawt or Verisign? These type of public facing certs you'll want to use on systems which will exchange requests from outside your internal network, for other systems which are
internal (like file servers) you can publish your own ssl certs through AD CS.
Free Windows Admin Tool Kit Click here and download it now
July 15th, 2010 4:48pm
Installing new SSL certs for IIS is relatively straightforward,
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/59152a38-e526-40fc-a6ad-71f0d148e962.mspx?mfr=true
http://learn.iis.net/page.aspx/144/how-to-set-up-ssl-on-iis-7/
*Note that here you will do an "import" instead of creating a self
signed certificate.
Exchange 2003:
http://technet.microsoft.com/en-us/library/aa995729(EXCHG.65).aspx
Exchange 2007:
http://technet.microsoft.com/en-us/library/bb851505(EXCHG.80).aspx#CreatingImportingandEnablingCertificates
For the non-Microsoft pieces, you may need to ask in a forum for the
vendor or refer to the product documentation.
-- Mike Burr
July 15th, 2010 5:53pm


