IIS - Changing to 2048-bit length certificate

Asked By Karen Adams
09-Feb-10 09:05 AM

It is time to renew our SSL certificate on our retail website, and we need to change our SSL certificate from 1024-bit to 2048-bit.  The vendor is requiring the 2048-bit length, now.  We are using IIS 6.  There is no option to create a new certificate (at least while the current one is installed), only to renew.  The renew option won’t let you change the length.  I have seen a few cases listed on the Internet where people have been told to create a temporary site and request the certificate for that site, then after processing the certificate on the temporary site, moving it to the real site. 

 

Could I get some more detail on the steps for doing that.  On the cases I read people seemed to have difficulty getting the certificate moved, and then things “magically worked”.  I don’t want to have to depend on something “magically” working.  Any help you can provide would be greatly appreciated.  Thanks.

Karen 

  Rengarajan Govindarajan replied to Karen Adams
24-Mar-12 04:55 PM
Steps involved :
1.Start -Run -inetmgr
2.Click -Sites-Right Click
3.Create a New Site
a. enter the site name :temp.xxxx 
b.enter the IP address same as original (under website)
c.home directory: same as original
d.port :8080 (under website)
e.DIrectory security -click server Certificate
f.follow the screen to create a new certificate
g.enter name ,
 bit length for encryption (which can be entered as per our requriement)
h.save the cert file in physical location (CSR file)
i.renew the CSR in the website,which will get the o/p as bit length which has entered during the CSR preparation
j.copy the CERT file (after renewal of temp site)and renew the same in temp site with the same DN ,site ,location ,country as original
k.Right click on original  website (for which we have created a temp site to renewal the same)
select Properties - Directory security -server ceritifcate - replace the certificate with the Renewaled one with temp site

Finally we can get the renwaled certicate with new bit length as same as in temp site.
 

Finally
Create New Account
help
64 bit os + 32 bit iis IIS pondering. . . I'm deploying a new x64 server and some debate has come up if its better to run the os as 64 bit or 32 bit when iis 6 will run in 32 bit mode. I want to run asp.net 1.1 on the new box, but 1
IIS 7.0 problems IIS I have installed windows longhorn, I'm trying to install IIS, and I'm getting lots of errors in the installation of the http and security, the only portion that is installed is the FTP. I tried to uninstall IIS and install it back again, never succeeded. I have Directory services, DNS, and I'm trying to install IIS on the server. any ideas ? Thank you so much. IIS Discussions IIS (1) ASP.NET (1) Windows Server (1) ClientCertificateMappingAuthentication (1) IISCertificateMappingAuthentication (1) WebServerManagementTools (1) ManagementScriptingTools (1 build of longhorn are you using? Try installing IIS7 from a command line.http: / / www.iis.net / default.aspx?tabid = 2⊂tabid25&i = 958 - - Steve Schofield Windows Server MVP - IIS ASPInsider
Installing 32-bit IIS 6.0 on 64-bit OS IIS I am trying to install 32-bit IIS 6.0 on a 64-bit Windows 2003 Enterprise edition. I am unable to find this dll "wiismui.dll" in 32- bit I 386 folder. Is it possible to install 32bit IIS on a 64-bit OS
Export IIS config from 32 bit to 64 bit IIS Hi, We are migrating all our web servers from 32 bit to 64 bit Windows 2003 R2 Std and I am using iiscnfg to import and export the IIS configuration. The problem is once I import the config into the new x64 version of Keep in mind that we have ported the web code over to run as 64 bit so we do not need to allow for 32 bit mode. Also I am testing