Table of Contents
Advertisement
4
Click View Certificate in the Secure Communications panel. The Certificate
Viewer appears.
5
Click the Details tab.
6
Click Copy to File. The Certificate Export Wizard appears.
7
Click Next. The Export Private Key screen appears.
8
Select the Yes, export the private key option. Click Next. The Export File
Format screen appears.
9
Select the Personal Information Exchange—PKCS#12 (pfx) option and any
optional choices you wish to use. Click Next. The Password screen appears.
10 Type the password in the Password and Confirm Password text boxes. Click
Next. The File to Export screen appears.
11 Type the path and file name in the File name text box or click Browse to select
a location manually. Click Next.
12 The Completing the Certificate Export Wizard screen appears. Click Finish.
The key and certificate file exported from IIS 5 are in PKCS#12 format. Use
Note:
the
import
certificate in this format.
Using OpenSSL
OpenSSL is installed on the server and paths are updated during the configuration manager
installation procedure presented in "Installing the Software" in Chapter 2 Installation.
Several command examples are shown here. For a complete listing of OpenSSL commands,
see the file opnsslcm.txt on the CD-ROM.
Note:
While a .pdf version of OpenSSL documentation is included on the CD-ROM, please
see http://www.openssl.org/docs/ for the most current version.
For Windows NT and Windows 2000, double-click the OpenSSL icon on the desktop to
open a command window. (The icon is copied to the desktop during installation on
Windows-based computers.) For Linux or Solaris, enter openssl at a command prompt.
When you are done working with OpenSSL on any platform, enter exit.
Note:
Key and certificate file names cannot contain spaces and must be compatible with
the server operating system. When prompted to either name a key or certificate
file or check the name of a key or certificate file, please ensure the names follow
these conventions.
Generating Keys
To generate an encrypted 512-bit key, enter this command at the prompt:
genrsa -des3 -out key512.pem 512
command in the configuration manager to load a key and
Chapter 3 SSL Introduction
Page 29
Advertisement
Table of Contents
