Microsoft Azure – CSR Generation & SSL Installation Guide Using The Digicert Certificate Utility

Azure requires a pfx/p12 for its SSL Certificate installation. This file can only be generated from a Windows system or an application. You will never attain such a file from a Certificate Authority. Typically in order to get an SSL Certificate for your Azure cloud services Admins will use Windows Server IIS (Internet Information Services) to generate the pfx/p12 keypair used to import into Azure, but not everyone has IIS. The Digicert Certificate Utility for Windows allows for the ability for admins to create the .pfx file needed for Azure systems without the need for a Windows Server. This guide will carry you through the following: CSR generation SSL installation Export of installed certificate as a pfx Import pfx into […]

Read More

Microsoft Server 2016 – IIS 10 & 10.5 – CSR Instructions

To generate a Certificate Signing Request (CSR) for Server 2016 – IIS 10 & 10.5 you will need to create a key pair for your server the public key and private key. These two items are a digital certificate key pair and cannot be separated. On Windows type systems like Microsoft Server 2016 – IIS 10 & 10.5 PFX/PKCS12 requests are made, and are stored on the system. The private key will remain hidden on the windows system where the CSR request is made. To generate a CSR on Windows Server 2016 – IIS 10 & 10.5 perform the following. Step 1: Generating your CSR: Choose Start > Administrative Tools > Internet Information Services (IIS) Manager. In the IIS Manager […]

Read More

Digicert Certificate Utility – CSR Generation & SSL Installation

The Digicert Certificate Utility is probably one of the best certificate encryption tool out on the net. A lot of people become scared with key-pair encryption but key-pairs/certificates are actually fundamental easy to figure out. You have a secret private key that rests on a system or application, and that system/application gives to another system/application the public key. From there they scrabble and authentication communication. That’s about it. The struggles with Encryption, and SSL certificates is associated with the systems/applications that use them. Different applications from different venders tend to want things their own way, in certain formats, extensions, files, etc.. Key features of the Digicert Certificate Utility that can help with the SSL Management  are.. SSL Certificate: Install certificates […]

Read More

Server 2003 IIS 6 – CSR Instructions

To generate a Certificate Signing Request (CSR) for Server 2003 – IIS 6 you will need to create a key pair for your server the public key and private key. These two items are a digital certificate key pair and cannot be separated. On Windows type systems PFX/PKCS12 requests are made, and are stored on the system. The private key will remain hidden on the windows system where the CSR request is made. Note: All certificates issued by a Certificate Authority must be SHA2/SHA256 algorithm due to industry standards by governing entities. IIS 6 Server 2003, has been known to not understand this Algorithm.  Installing a SHA2 certificate on your outdated system may not work. You may have to contact Microsoft […]

Read More

Server 2003 IIS 6 – CSR Instructions for Renewals

To generate a Certificate Signing Request (CSR) for Server 2003 – IIS 6 you will need to create a key pair for your server the public key and private key. These two items are a digital certificate key pair and cannot be separated. On Windows type systems PFX/PKCS12 requests are made, and are stored on the system. The private key will remain hidden on the windows system where the CSR request is made. Note: All certificates issued by a Certificate Authority must be SHA2/SHA256 algorithm due to industry standards by governing entities. IIS 6 Server 2003, has been known to not understand this Algorithm.  Installing a SHA2 certificate on your outdated system may not work. You may have to contact Microsoft […]

Read More

Server 2003 IIS 6 – CSR/Install Instructions for Renewals without removing the existing certificate

Issue Condition: To generate a new CSR without removing the current certificate, a Temporary Dummy website can be created. This workaround will apply for Microsoft IIS 6 server 2003 that currently have certificates installed on their website, but a new CSR with a new key-bit length or different information in the Distinguished Name needs to be created. Creating a temporary website allows you to keep the current certificate active on the site while another certificate request is pending. After installing the certificate on the temporary web site, it can be applied to the production web site. On Windows type systems PFX/PKCS12 requests are made, and are stored on the system. The private key will remain hidden on the windows system and […]

Read More

Microsoft Authenticode/Office-VBA Code Signing Certificate Guide

Enrollment for Microsoft Authenticode/Office-VBA Code Signing is a fairly simple process unlike Java Code signing. But there are some steps that need to be explained and remembered in order to have a successful enrollment, and certificate pickup. Microsoft Authenticode/Office-VBA Code Signing is used to Digitally sign 32-bit or 64-bit user-mode (.exe, .cab, .dll, .ocx, .msi, .xpi, and .xap files) and windows kernel-mode software. As well as digitally sign Microsoft Office VBA objects, macros, and third-party applications using VBA. Here is a list of things to be aware of when enrolling for Microsoft Authenticode/Office-VBA Code Signing: Certificate creation for Microsoft Authenticode/Office-VBA Code Signing is conducted in your browser during enrollment. Depending  on the code signing product you will be advised on the enrollment requires, […]

Read More

Microsoft Office 365 – CSR Instructions

To generate a Certificate Signing Request (CSR) for Office 365 you will need to create a key pair for your server the public key and private key. These two items are a digital certificate key pair and cannot be separated. On Windows type systems PFX/PKCS12 requests are made, and are stored on the system. The private key will remain hidden on the windows system where the CSR request is made. To generate the CSR Information Services (IIS) Manager is used. To generate a CSR for Office 365 using IIS perform the following. Step 1: Generating your CSR: Choose Start > Administrative Tools > Internet Information Services (IIS) Manager. In the IIS Manager on the left, select your server name. In the […]

Read More

Microsoft Forefront TMG Server – SSL Guide

Microsoft Forefront TMG Server system does not include an easy GUI method to create a CSR. The following guide includes typical recommendations for you to successfully enroll and implement an SSL certificate pfx file needed for your AD LDAP. Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012. Forefront uses Pfx files for its keypair management so typically IIS is used for key generation. The typical procedure is as follows. Generate the CSR for your SSL certificate from one of the following methods. If you have a server system that has Windows Internet Information Services Manager IIS. CSR generation instructions for IIS 7 – 7.5 systems. CSR generation instructions for IIS 8 -8.5 systems. Generate the CSR using Portecle Keypair […]

Read More

Microsoft Active Directory LDAP – SSL Guide

Microsoft Active Directory (AD) Lightweight Directory Access Protocol (LDAP) server system does not include an easy GUI method to create a CSR. The following guide includes typical recommendations for you to successfully enroll and implement an SSL certificate pfx file needed for your AD LDAP. Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012. The typical procedure is as follows. Generate the CSR for your SSL certificate from one of the following methods. If you have a server system that has Windows Internet Information Services Manager IIS. CSR generation instructions for IIS 7 – 7.5 systems. CSR generation instructions for IIS 8 -8.5 systems. Generate the CSR using Portecle Keypair creation and manipulation tool. After the SSL certificate has been […]

Read More