Search results matching tag 'ssl cert security iis5 xp'

Failed to install Verisign SSL digital certificate on IIS 5.0. Please help!!

stamtarm — Mon, 05 Jan 2009 04:15:03 GMT

I have tried several times, revoke and replace certificate, and asked Verisign for help too. But at the end it still failed.

Error message are shown as below:

- When installing the certificate:

"Failed to install certificate, keyset does not exists"

- When trying to export the private key using MMC function, the option for "Export private key" is disabled and it says "Notes: The associated private key cannot be found. Only the certificate can be exported."

I have changed the permission of the administrator and system account to Full Control for the following folders and files already:

Folders

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys

C:\Documents and Settings\Administrator\Application Data\Microsoft\Crypto\RSA

All files inside the following folder

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys

Please kindly assist!! Thank you very much!!

sta

Re: Client Certificates on XP Pro (IIS 5.1)

JaroDunajsky — Thu, 17 Apr 2008 04:11:15 GMT

Jeff,

From your description it is not clear if CA certificate is installed in the trusted root of the "current user" or "local machine" context.
You mention "My local machine", but I assume you were referring to your hardware and not the context for which certificate is installed and trusted.

Have a look at http://msdn2.microsoft.com/en-us/library/aa302408.aspx . Step 3 is the one which doesn't appear in the link what you were using

You may also want to try out SSLDiag. It is very useful tool to detect various problems related to SSL. http://www.microsoft.com/downloads/details.aspx?familyid=cabea1d0-5a10-41bc-83d4-06c814265282&displaylang=en

Good luck

X.509 Client Cert on IIS5 XP

mark_richman — Wed, 05 Mar 2008 02:56:09 GMT

Hi...I'm looking for a HOWTO on setting up not only a self-signed server cert (for development and QA) but also a client cert to test web service calls. Most of what I've seen involves OpenSSL, so I was wondering if there were a good tutorial out there...between openssl, selfssl, makecert, and winhttpcertconfig it can be a bit confusing, especially when I'm stuck with IIS5 on XP!

Thanks,
Mark