Generate csr?

Excuse me as I'm not very familiar with using certificates.

I have a multi-tiered web app that resides in multiple DMZs. Ichain is used
as a reverse proxy to the front end web server. I'm creating a clone of
this environment for development, and I used SAN flash copies so that it is
identical to production.

We're creating a test accelerator through ichain to get to this test
environment, and my ichain guy asked for a .csr for the certificate between
it and the front end web server. How do I generate this? Keep in mind the
production one is already there and if possible I'd like to use it. I found
this http://www.geocerts.com/products/csr/MS_IIS6.php, but when I go through
the wizard it instead asks me what todo with the existing cert.

Any ideas? Front end box is 2003 iis 6, no service packs yet.

Re: Generate csr?

You shouldn't need a CSR as you already have the certificate.

My guess is you have something like this in production:

ichain (with public cert) <-----> IIS (with private cert)

If this is the case, then you need to export your cert from ichain, and
import it into your test environment ichain device. On the other hand, if
you ahve something like:

ichain <----> IIS (with public cert)

then you can export the cert from the IIS machine:

Start -> Run -> mmc.exe

Add the "Certificates" snapin, and choose to point it at the
Computer/Machine cert store

Go to the "Personal" certificates node, and locate your certificate.
Right-click and choose to export the certificate.

during the export process you will be asked to choose between two security
options. Do not choose the "Enable Strong Protection" option (as this
requires a password to be entered every time the cert is accessed, which
isn't suitable for a non-interactive situation like IIS)

You'll then have a PFX file that can be imported into your test IIS
environment.

Cheers
Ken

Cheers
Ken

--
My IIS blog: http://adopenstatic.com/blog


"TalioGladius" wrote in message
news:AF656B1D-406D-4B3A-9FE0-866C806CDDA5@microsoft.com...
> Excuse me as I'm not very familiar with using certificates.
>
> I have a multi-tiered web app that resides in multiple DMZs. Ichain is
> used as a reverse proxy to the front end web server. I'm creating a clone
> of this environment for development, and I used SAN flash copies so that
> it is identical to production.
>
> We're creating a test accelerator through ichain to get to this test
> environment, and my ichain guy asked for a .csr for the certificate
> between it and the front end web server. How do I generate this? Keep in
> mind the production one is already there and if possible I'd like to use
> it. I found this http://www.geocerts.com/products/csr/MS_IIS6.php, but
> when I go through the wizard it instead asks me what todo with the
> existing cert.
>
> Any ideas? Front end box is 2003 iis 6, no service packs yet.