Question : 123-Reg/GlobalSign SSL certificate install problem

Hi all,

I've got a client who bought an SSL certificate from 123-reg (who are a reseller for Globalsign) and they've been issued with a certificate and a private key, both of which are plain text. They used AutoCSR from what I can tell, since they never asked me for a CSR and all I'm left with is some text to copy and paste, and the job of somehow getting it to work on my Windows 2003 server.

If I copy and paste the text into notepad and save it with a .cer extension, the system recognises the certificate in MMC, and I can add it as a snap in. However, I don't know what to do with the Private Key, or even know if adding it through MMC is the right thing to do.

Does anyone have any experience with this? If so, any help is very much appreciated!

Answer : 123-Reg/GlobalSign SSL certificate install problem

Using Notepad, create a single file out of your certificate and private key. The resulting file should look something like shown below. Then use OpenSSL to convert it:

openssl pkcs12 -export -out IIS_CERT_FILE.p12 -in TEXT_KEY_AND_CERT.pem

Once done, IIS_CERT_FILE.p12 can be imported into IIS with no problem.

Sample contents of TEXT_KEY_AND_CERT.pem:

                       
             -----BEGIN CERTIFICATE-----
MII...certificate.text...
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
MII...private.key.text...
-----END RSA PRIVATE KEY-----

Open in New Window

Select All