IIS 7 and Above
Could not establish trust relationship for the SSL/TLS
Last post Mar 20, 2018 08:56 AM by Yuk Ding
Mar 12, 2018 04:02 PM|joey_castell|LINK
I haven't posted on here before and please forgive me as I am quite new to IIS.
I am running Windows server 2012 R2 and IIS 8 and SQL server 2016.
I have been trying to set up access to SQL analysis services through https and I am have some issues with the SSL. The message I am getting is "Could not establish trust relationship for the SSL/TLS" I think it's a problem with my certificate. I am using
our companies website certificate which is in date.
What I have done so far:
Here is a screenshot:
I haven't set a host name as I am only trying to connect over our local network at the moment.
Also when browse the *.443 it is showing as not secured. Do you think the problem is the certificate? If so I suppose it could be because I also need to install some other certificates it's dependant on, but I am not sure how to find this out?
Also it's worth noting that I have also tried to do this with just a self signed certificate and it had exactly the same outcome.
Can anyone help?
Mar 13, 2018 06:32 AM|Yuk Ding|LINK
So how did you generate the company certificate? The web browser could return untrusted certificate because the website is using a self-signed certificate. So if you have the intermediate certificate or root certificate, please import it to your MMC trust
root authority or intermediate zone.
If you were using the certificate for testing purpose, then you could just ignore this warning and click continue to the website.
It is recommended to apply a purchased trusted ca for your website.
In addition, did you enable the SSL following this link?
Mar 13, 2018 09:09 AM|joey_castell|LINK
Hi Yuk Ding,
The company certificate was issued by digicert to out .co.uk website and has an expiry date, I think I may need to install another certificate that it depends on but I am unsure how to check this?
Could it be that I am not setting my website name as company.co.uk?
Thanks for your help its much appreciated,
Mar 20, 2018 08:56 AM|Yuk Ding|LINK
digicert should be trusted. Did you install the certificate following this link?
Of course, you need to ensure the website is set to the binding company.co.uk. If it is a internal domain, then you need to create the DNS CNAME and IIS binding for binding company.co.uk.
However, if it is a public domain, you need to bind the domain to public IP and create the IIS binding as well.