Replacement IIS6 SSL certs 1

[newtonetworks]

Hello All,
Hoping someone can provide me with some quick help here. I have load balanced web servers (2003, IIS6), with a secure site that needs it's SSL certificate replacing, I generated a CSR on 1 of the web servers, and bought a new certificate with a 2 server license form Verisign. I have this new certificate installed on both web servers, but when I select "Replace the current certificate" in IIS, and install the new cert the secure section of the site stops working.
The certificate is definitely valid.
The Intermediate and root Verisign CA's already exist on both web servers and dont expire until 2016.
I've tried restarting the website, IIS and the entire web server but with the new certificate but with no luck.

Can anyone let me know what Im doing wrong? Does IIS6 not like .cer format? Should I not be using the "Replace current certificate" option?
Any help greatly appreciated, existing cert expires in less than 48 hours!

Thanks in advance.

 

[Topkapi]

I have only limited experience of this but as far as I recall when you go back to the IIS site from where you generated the CSR and start the We Server Certificate Wizard it should present you with the option to "Process the pending request". You then get the opportunity to direct the wizard to the new certificate.

Are you sure you are on the correct site ?

Hope that helps

 

[newtonetworks]

That's correct, but there is only a pending request on 1 server that the CSR was generated on. On this server, I followed the "Complete a pending request" procedure, on the second web server I simply replaced the existing certificate.

This is the usual way to complete this, as the certificate must be identical on both servers, so only 1 will ever have the pending request. The CSR is specific to the web site and not the web server.

Thank you very much for the reply, any other ideas?

 

[Topkapi]

I think you can export the cert as a PFX and import it on the 2nd server.

This page looks to have some useful info.

http://www.sslshopper.com/move-or-c...windows-server-to-another-windows-server.html

 

[newtonetworks]

Exporting to .pfx for installation on the second server worked perfectly.

Thank you!