SSL and certificates 2

[tekquest]

Hi all,

Recently I have setup outlook web access and I would like to be able to access it outside the exchange site its installed in.

I want to use SSL, possibly port 443.

I have been trying to generate key's and certificates in IIS, (using version 4.0). Does anyone know how to generate a certificate or does it need to be purchased from a company like verisign??

Any info would be much appreciated, thanks for looking.

Luke.

 

[epohl]

You can generate your own Cert using IIS Certificate Services. Just realize people are going to get a security warning connecting unless you add this as Certificate Authority. This article should be helpful.

http://support.microsoft.com/default.aspx?scid=kb;en-us;290625

 

[tekquest]

Hi Epohl,

That appears to be for Windows 2000, IIS 5.0 with Certificate server.

I am using IIS4.0 running on Winnt 4.0, do I need to purchase a server SSL certificate from Verisign? I am unsure.

Thanks,

Luke

 

[epohl]

Sorry about that, next time I should read a little closer. If this is going to be a site that is accessable via the internet I would recommend buying a certificate from Verisign or another Authorized Vendor.

 

[tekquest]

Hi Epohl,

Thanks for your reply, its my fault, I never mentioned it was an NT4 server!!!

Thanks

Luke

 

[themosquito]

Check out

http://www.cacert.org

as they are a non-profit Certificate Authority based in Austrailia and you can get SSL and email certificates for free by registering with them.

 

[tekquest]

Thats excellent, thank you so much

 

[Score1000]

Certificated issuded by known Certificate authorities worldwide are added in IE by default so the users who connects to a secure site would not get an error message ever, but if you had the Win2000 and you generate your cert yourself, since no IE by default knows your cert server so users get a message, to resolve you should install your server Cert on all the clients IE.

look at this ev1servers.net, they provide Geotrust certs for a small amount of money. first generate your CSR (certificate signing request) in your IIS, then go to site and fill the order form, attention: do not open your CSR in any editor except notepad after you generate it. you should copy/paste this key in the order form
hope it helps