Another Certificate problem Help

[rac504uk]

Hi ,

I have a similar problem as miniman ([url]http://pistonheads.com/gassing/topic.asp?t=175781&f=95&h=0[/url]) where the certificates have expired and we have tried to renew them on the Primary Domain controller but they won't replicate onto other machines. We have a https website running which uses ssl and whenever we type the url "https://server.domainname.co.uk" we get this message see link below.
[pic] http://photos.fotango.com/p/eba00516353f00000001.jpg[/pic]

or does anyone know of a good web site to teach how to troubleshoot certificates, it seems to be a subject that's difficult to find good resources on.

Any help with this one would be greatly appreciated.
cheers

[_DeeJay_]

rac504uk said:

Hi , I have a similar problem as miniman ([url]<a href="https://via-us.bookham.com/get/uri/http://pistonheads.com/gassing/topic.asp?t=175781&f=95&h=0">http://pistonheads.com/gassing/topic.asp?t=175781&f=95&h=0</a>[/url]) where the certificates have expired and we have tried to renew them on the Primary Domain controller but they won't replicate onto other machines. We have a https website running which uses ssl and whenever we type the url "https://server.domainname.co.uk" we get this message see link below. [pic] <a href="https://via-us.bookham.com/get/uri/http://photos.fotango.com/p/eba00516353f00000001.jpg">http://photos.fotango.com/p/eba00516353f00000001.jpg</a>[/pic] or does anyone know of a good web site to teach how to troubleshoot certificates, it seems to be a subject that's difficult to find good resources on. Any help with this one would be greatly appreciated. cheers

I'm not sure I follow. Your issue is different to miniman's - his relates to the name on the certification (not matching the URL typed to access the site) and yours relates to an expired certificate.

All you need to do is replace the certificate on the web server.

In the IIS MMC you need to find the certificate information (properties -> security or something like that) then replace the old certificate with the new one.

You can probably do the whole process from that console (depending on the type of CA you've got).

Darren

edited to add: a quick search reveals this - http://support.microsoft.com/default.aspx?scid=kb;en-us;Q295281

p.s - There is no kind of certificate replication involved. I assume you have the CA service installed on your PDC?
When you generate a certificate it's stored on the local disk on that machine. You need to get hold of it and install it on your web server (and the above link will help you do that).



>> Edited by _DeeJay_ on Wednesday 4th May 11:03

[JamieBeeston]

If you click on View Certificate, you should see a

: Valid From xx/xx/xx to yy/yy/yy

This should help track down if it has actually expired.

J