How crt certificate was generated?

IIS 6

I followed these instructions to deploy HTTPS connectivity, all works
fine.

I was then trying to install on the client (under Trusted root CA) the
same certificate that I used to complete the pending request in IIS;
the reason is that I would like to suppress warning in IE.

By the way, it didn't work.

So, I browse C:\ and found a mycompanyCA.crt file that was generated
in the same minutes other certificates was generated.

I say: "Give it a try..." and installed this certificate on client.

Works like a charm.

My best questions are

- when and who generated this *.crt ?
- if I have to reproduce this behavior, how can I do?

Any help appreciated.

Best regards.

Re: How crt certificate was generated?

Are you using SBS or similar? IIS wizard will only generate one CRT file.

To have the client trust the installed cert, then CA's root signing cert
needs to be installed into the client.

Cheers
Ken

"joker197cinque" wrote in message
news:8301f05e-1f7f-4429-a68f-96ff4fbc25b0@l42g2000hsc.google groups.com...
> IIS 6
>
> I followed these instructions to deploy HTTPS connectivity, all works
> fine.
>
> I was then trying to install on the client (under Trusted root CA) the
> same certificate that I used to complete the pending request in IIS;
> the reason is that I would like to suppress warning in IE.
>
> By the way, it didn't work.
>
> So, I browse C:\ and found a mycompanyCA.crt file that was generated
> in the same minutes other certificates was generated.
>
> I say: "Give it a try..." and installed this certificate on client.
>
> Works like a charm.
>
> My best questions are
>
> - when and who generated this *.crt ?
> - if I have to reproduce this behavior, how can I do?
>
> Any help appreciated.
>
> Best regards.

Re: How crt certificate was generated?

On 4 Apr, 18:55, "Ken Schaefer"
wrote:

> Are you using SBS or similar? IIS wizard will only generate one CRT file.

Only IIS and Certificate Services

> To have the client trust the installed cert, then CA's root signing cert
> needs to be installed into the client.

How can I obtain "CA's root signing cert" ?

Best regards.

Re: How crt certificate was generated?

On 4 Apr, 18:55, "Ken Schaefer"
wrote:

> Are you using SBS or similar? IIS wizard will only generate one CRT file.

Only IIS and Certificate Services

> To have the client trust the installed cert, then CA's root signing cert
> needs to be installed into the client.

How can I obtain "CA's root signing cert" ?

Best regards.

Re: How crt certificate was generated?

On Apr 7, 10:03 am, joker197cinque wrote:

> How can I obtain "CA's root signing cert" ?

I think I got it.

Browsing CA server I found a share named:

\\server\CertEnroll

and inside this folder I found my crt.

Best regards.

Re: How crt certificate was generated?

If you are using Certificate Services web enrollment you can go to
http://yourCA/certsrv and there is an option to download the CA's
certificate.

Otherwise you can export the CA's cert from your CA machine using the
Certificates MMC

Cheers
Ken

"joker197cinque" wrote in message
news:c4df4ecd-c3ae-4892-97b7-d260d0daa3e8@e39g2000hsf.google groups.com...
> On 4 Apr, 18:55, "Ken Schaefer"
> wrote:
>
>> Are you using SBS or similar? IIS wizard will only generate one CRT file.
>
> Only IIS and Certificate Services
>
>> To have the client trust the installed cert, then CA's root signing cert
>> needs to be installed into the client.
>
> How can I obtain "CA's root signing cert" ?
>
> Best regards.