Certificate Trust Lists and IIS7

[Neily]

I need to generate a CTL for use with IIS7.

I generated a CTL file using MakeCTL (on Win2k3 SDK) and put only my own RootCA certificate in the CTL.

However, when I then use adsutil.vbs to set my website to use this CTL, I get:

ErrNumber: -2147023584 (0x80070520)
Error Trying To SET the Property: SslCtlIdentifier

I'm using adsutil.vbs like this:

cscript adsutil.vbs set w3svc/2/SslCtlIdentifier <CTL-Name>
where <CTL-Name> is the friendly name of the CTL

The problem is, I am not able to set a friendly name. At the end of the wizard it says "Friendly Name: <none>".

In IIS6 I can create a CTL with a friendly name (showing in Certificates MMC) but if I export it from there, when I import it, it no longer has a friendly name.

Can anyone show me how to do it please?