Sunday, October 16, 2011

How to Sign Certificate using Microsoft Certificate Authority (CA) in windows server 2003

Part: 3:  Signing certificate using Certificate Authority (CA)
Part: 4:  Installing SSL Signed Certificate IIS 6.0

In Part2 of this tutorial you have learn  How to install and configure Microsoft Certificate Authority windows server 2003 now in Part3 you will learn How to Signing certificate using Certificate Authority.








On the server in which we have saved the CSR. if you don't know how to Create Certificate Signing Request (CSR) Click Here

Go to Start ->  Internet Explorer

                                            Image  1



If you installed  Microsoft Certificate Authority (CA) on the same server in which you are hosting the website then in the Address Bar type http://localhost/certsrv and if you have install Microsoft Certificate Authority (CA) some where else you have to type IP Address that server For example:  http://192.168.1.76/certsrv
Once you have open the Microsoft Certificate Services page Click On Request a certificate

                                            Image  2 




Click On advanced certificate request

                                            Image  3 




Click On Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file. 

                                            Image  4 




In the empty box you have to copy the text from .CSR file and past it into the text box as shown below in Image 6 

                                            Image  5 




Copy all the text from the Certificate Signing Request (CSR) file
Note: If you don't know how to generate Certificate Signing Request (CSR) file see the Part1 of this tutorial Click Here

                                            Image  6 




Past the copied text in the box as shown in the image. now click on Submit. 

                                            Image  7 




After you submit certificate request the certificate pending page will appear close this window.

                                            Image  8 





Go to Start -> Administrative Tools -> Certification Authority

                                            Image  9 




From the left pane expand the “Certification Authority (Local)”

                                            Image  10 





Click On Pending Requests folder ->  right click request id, select All Tasks, and then click on Issue.

                                            Image  11 




After Issuing the certificate verify the Certificate is Issued properly by Clicking On Issued Certificates.  Now close Certificate Authority window.


                                            Image  12 



Now open Microsoft Certificate Services Webpage. In the Address Bar type http://localhost/certsrv and if you have install Microsoft Certificate Authority (CA) some where else you have to type IP Address that server For example:  http://192.168.1.76/certsrv


Click -> View the status of a pending certificate request.

                                            Image  13 



Click Save-Request Certificate ( DAY-MONTH-DATE-YEAR)

                                            Image  14 



Select DER encoded -> Click Download Certificate

                                            Image   15




Click on Save

                                            Image  16 



Browser to folder where you want to save the Certificate.

                                            Image  17 



Click Open to view the Certificate.


                                            Image  18 




Here you can view all the details of the Certificate.

                                            Image  19 


You successfully Issued Certificates using Microsoft Certificate Authority (CA) on windows server 2003 and downloaded the Certificate now in Part: 4: of this tutorial you will learn how to Install SSL Signed Certificate Internet Information Services (IIS)



Part: 3:  Signing certificate using Certificate Authority (CA)
Part: 4:  Installing SSL Signed Certificate IIS 6.0 

Thursday, October 6, 2011

How to install and configure Microsoft Certificate Authority (CA) in windows server 2003


Part: 2: How to install and configure Microsoft Certificate Authority (CA)
Part: 4:  Installing SSL Signed Certificate IIS 6.0

In Part1 of this tutorial we have demonstrated how to generate CSR now in Part2 you will learn How to install and configure Microsoft Certificate Authority (CA)

Note: To install the Certificate Authority you first need to install IIS on a Windows Server 2003 Click here to Install and Configure Internet Information Services 6.0 (IIS)




Go to Start ->  Control Panel -> add remove or programs

                                         Image  1


Click Add or Remove Programs, Click Add/Remove Windows Components. On the windows component wizard selectjjk  Certificate Services -> Click Next
                                         Image  2



Click Yes

                                         Image  3


Click Next

                                         Image  4


On the CA Type Select Stand-alone root CA -> Click Next

                                         Image  5


On CA Identifying Information, in the Common name for this CA box, type the name of your server, On distinguished name suffix type DC=name of your server (Example: DC=tec)  and then click Next.

                                         Image  6


On Certificate Database Settings -> click Next.

                                         Image  7


Click Yes

                                         Image  8


Insert cd of windows server 2003 if prompt and Click OK

                                         Image  9


                                             Image  10


Click Yes

                                         Image  11


Click Finish

                                         Image  12


You successfully installed Microsoft Certificate Authority (CA) on windows server 2003 now in  Part: 3: you will learn how to Signing certificate using Certificate Authority (CA)

NOTE: you can install Microsoft Certificate Authority (CA) any machine running windows server 2003. It is not required to install CA on the machine where your Website is hosted.


Part: 1:  Creating a Certificate Signing Request (CSR)
Part: 2: How to install and configure Microsoft Certificate Authority (CA)
Part: 4:  Installing SSL Signed Certificate IIS 6.0


Wednesday, September 14, 2011

How to Configure SSL on IIS 6.0 in Windows Server 2003

Part: 1:  Creating a Certificate Signing Request (CSR)
Part: 4:  Installing SSL Signed Certificate IIS 6.0


Requirements
  • Windows Server 2003
  • Internet Information Services (IIS) 6.0
  • Certificate Authority (CA) or Purchase SSL Certificate Online
Due to the length of this tutorial it is broken into four parts.


 
Start -> Administrative Tools -> Internet Information Services (IIS) Manager
                                            Image 1



Right click on your website Go to properties.
                                                       Image 2 



Go to - Directory Security tab.

                                                       Image 3


Click on Server Certificate button.

                                                       Image 4


On Web Server Certificate Wizard click next.

                                                       Image 5


Select the first radio button, Create a new certificate, then click next.

                                                       Image 6


Select the radio button Prepare the request now, but send later option, then click next.

                                                       Image 7


Give your certificate a name you wish. It is best if you give it the same name as your web site. 
Set the Bit Length to 2048 and do not check the bottom checkboxes, then click next.

                                                       Image 8


In the organization field to the name of your company. 
In the organization unit type the department the certificate will belong to or your company name and unit. Click next.

                                                       Image 9


Common name is the address of website that certificate will cover. It can be www.yourwebsite.com
You require to buy a  DNS name (domain name) if you plan on accessing your secure site over the Internet. 
If you dont have a domain name you can buy Domain Sale! $7.49 .com at GoDaddy it is Worlds's largest domain  name registrar.

Enter the common name and click next.

                                                       Image 10


Enter your Country, State, and City then click next.

                                                       Image 11


click on Browse
                                                       Image 12


Enter name of the file for your certificate request. Save it anywhere where it is safe. Click next.

                                                       Image 13




IIS Certificate Wizard displays all the informational you have entered. If you find mistake in the entry click the back and correct the error. 
After you are done click next.

                                                       Image 14


Well you have created a Certificate Signing Request (CSR) Click finish.

                                                       Image 15


To view Certificate Signing Request (CSR) open the txt file which you have saved earlier see (Image 13)


                                                       Image 16

You have successfully generate Certificate Signing Request now in  Part: 2: you will learn How to install and configure Microsoft Certificate Authority (CA) on Windows Server 2003



Part: 1:  Creating a Certificate Signing Request (CSR)
Part: 4:  Installing SSL Signed Certificate IIS 6.0