|
This example shows how to obtain online a test server certificate from VeriSign for Microsoft Internet Information Server 4.0.
To generate a public and private key pair and CSR for a Microsoft Internet Information Server 4.0:
| 1. | Open the Microsoft Management Console (MMC) for IIS. On Windows NT, this can be reached by selecting Start-Programs-Windows NT 4.0 Option Pack-Microsoft Internet Information Server-Internet Service Manager. |
| 2. | In the MMC, expand the Internet Information Server folder by selecting the "+" sign. |
| 3. | After expanding this folder, select the "+" sign next to the computer name. |
| 4. | The Default Web Site should be available now, right click on the icon and choose Properties. |
| 5. | In the Default Web Site Properties, choose Directory Security. |
| 6. | In the Secure Communications area of this Property Sheet, select the Key Manager button. |
NOTE: If the button reads "edit" instead of "Key Manager" you already have an encryption certificate for the WWW Service installed.
| 7. | Once you are in the Key Manager, right click the WWW icon and select "Create New Key..." |
| 8. | The Create New Key dialog appears. You will see two configuration options in this dialog. Choose "Put the request in a file that you will send to an authority." Select an appropriate filename (or accept the default). Later, you will need to copy information in this file into a form on the VeriSign web site. |
| 9. | Fill out the next dialog. Key length available will depend on the level of encryption on your version of NT Server. Normally, domestic (US and Canadian) versions of NT will have 128-bit encryption available and export versions of NT will have 40-bit. The installation of NT Service Packs may affect this as Service Packs come in both 128 and 40 bit versions. |
NOTE: Remember the password you enter. Without it, you will not be able to perform actions that access your private key material (for example, backing up or restoring a key).
| 10. | Continue filling out the dialog. The "Common Name" of the certificate MUST be either the Name of the NT Server (if using WINS) or the Domain Name of the Server if on the Internet. For example, "www.example.com". |
NOTE: For every website that has a distinct DNS name, there must be an encryption Key installed. However, each website for SSL MUST have a distinct IP address as well. SSL does not support the use of host headers.
| 11. | Continue form completion with Country/Region, State/Provice, and City/Locality. Do NOT abbreviate the state name. Your request will be rejected if you do so. |
| 12. | In the Your Name E-mail Address, and Phone Number fields, supply the appropriate contact information and press Finish. |
Key Manager will display a key icon under the WWW icon. The key will have an orange slash through it indicating it is not complete.
| 13. | Choose the "Computers" menu and select Exit. Choose YES when asked to commit changes. |
NOTE: If you close Key Manager and do not commit the changes, the key will not function properly. If this occurs, delete the partial key in Key Manager and create the request again.
|
