Need to replace/renew SSL cert and change OU in IIS 5.0

G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

Hi,

Our company name has changed and now one of our SSL certs is up for
renewal. I'd like to renew or replace the current certificate and
change the OU (Organizational Unit) that is listed on the certificate.
I am unsure how to do this from the IIS MMC snap-in. The renewal
wizard doesn't let you change any details and I don't know how to
generate a CSR with new details without first removing the current
certificate.

Any help would be greatly appreciated.

Kelly
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

You may want to post in the security.crypto newsgroup also. One option may
be to use Web Enrollment assuming it is enabled for your domain where you
would use http://CAname/certsrv to connect to a CA. Then you can do an
advanced request for a Web Server certificate. The name you enter would be
the name of your website as currently shown on your website certificate. The
department field is equivalent to the OU field. Then be sure to mark the
option to use local machine store. When done you should find the certificate
in the machine certificates mmc snapin. You can then review the information
to make sure it is correct and if it is not then delete the certificate and
try again. On the details page of the certificate look in subject name to
see if info is correct. You want to make sure that the certification path
looks exactly the same on your new certificate as the current certificate so
that user's do not receive a warning when they try to access your
website. --- Steve

http://www.tacteam.net/isaserverorg/exchangekit/2003standalonewebenroll/2003standalonewebenroll.htm
--- an example of Web Enrollment


<krlucas@gmail.com> wrote in message
news:1112649318.324347.274090@g14g2000cwa.googlegroups.com...
> Hi,
>
> Our company name has changed and now one of our SSL certs is up for
> renewal. I'd like to renew or replace the current certificate and
> change the OU (Organizational Unit) that is listed on the certificate.
> I am unsure how to do this from the IIS MMC snap-in. The renewal
> wizard doesn't let you change any details and I don't know how to
> generate a CSR with new details without first removing the current
> certificate.
>
> Any help would be greatly appreciated.
>
> Kelly
>