Importing Certificates

[caubeshock 87]

I have a certificate security question I was hoping someone might be able to answer.



We have two Windows 2K3 servers running IIS, we�ll call them Server X and Server Y. They are using Microsoft�s version of NLB (Network Load Balancing) and they are not connected to any outside resources just yet. Essentially we want to apply the Private Certificate from the one server to the other. Right now Server X has a Private certificate on it. We want to apply that certificate to Server Y essentially applying one cert to both servers. Is this possible and if so, how? Yes, we�ve tried running the export from X and an import on Y and we get �this certificate has already been applied on another server� message. What do you think? Can I do this? Thanks in advance.

More Information:

1. I'd like to automate importing cert(s) on a Windows CE device
2. When importing a certificate reply, the certificate reply is validated using trusted certificates from the keystore, and optionally using the certificates
3. File Format: PDF/Adobe Acrobat - Quick Viewthe process to export the certificates for safe-keeping and importing backed-up certificates
4. File Format: PDF/Adobe Acrobat - Quick ViewImporting a Secure Certificate (Internet Explorer)
5. The 'keytool -import' command can be used to import certificates into a 'keystore' file
6. Exporting and Importing in Windows IIS Server Exporting/Backing up your Certificate/Private Key in IIS (

More:

• [VIRUS] W32/Sobig-F
• NET. Messenger update email.
• [VIRUS] W32/Dumaru-A
• [VIRUS] W32/Blaster-D
• DirectX attack expected - patch Windows now
• [VIRUS] W32/Nachi-A
• After installing the Blaster patch ...
• Link to MS latest security patch
• Check your systems shields
• Blaster virus symptoms ???

[thungoc187]

Hi rjt1031,



We need a little bit more info, if you don't mind.



You are load balancing what? Website I presume...

Where did you get the certificate from? Local CA?



The certificate is issued to whom ie. www.testdomain.com. or to an IP address?

Is there ISA publishing?



When exporting the Certificate from the first server, make sure that you "mark Private key as exportable, and you set a password.



Waiting your reply

More Information:

1. This option can be reached from the EZproxy Administration Page and then the Manage SSL (https) Certificates page
2. Is there anything that I'm doing wrong here? Should I restart the server after importing the certificate?
3. This article describes how to remove, export and import digital certificates in Internet Explorer and Outlook Express
4. File Format: PDF/Adobe Acrobat - Quick ViewImporting the Certificate
5. To import digital certificates that you previously exported, follow these steps:
6. If you are exporting certificates for import onto a computer running another operating system, it is possible that the PKCS #7 format is supported
7. You can also import and export Internet certificates for use between other Internet applications, such as Microsoft Outlook

[vn2262296]

Thanks for the quick reply. The NLB is being used for the front end of the server. The cert is issued from an enterprise cert. authority and the cert is issued to the domain or the domain name.



I'll verify that the PK was "set as exportable" (good suggestion) and has a PW.



Thanks again and please respond if there may be more info.





Cheers!

More Information:

1. Import permits, health certificates, or forms other federal government departments require; Tariff Treatments/Trade Agreements; Paying Cash; Accounting; Payment; Penalties; Interest; Correcting your accounting
2. If that is the case for your server, there are two ways that you can generate duplicate certificates inside your
3. The "cacerts" keystore file ships with five VeriSign root CA certificates, so you probably won't need to import a VeriSign certificate as a trusted
4. 4 posts - 2 authors - Last post: Mar 25, 2009self-signed certificates
5. After a little research, I found that the option for importing a certificate and key (about third or fourth option) would work, if I exported the
6. Open “IIS Manager” and select your server, then open “Server Certificates”
7. Right click on Certificates and choose All Tasks, then Import… The Certificate Import Wizard will appears, press Next to get past the Welcome page
8. It also contains the tool to use for importing your certificate onto your Palm OS Treo/Centro
9. Windows clients support web enrolment, an alternative to importing a certificate from a file
10. The system leverages one of the most common applications of PKI and digital certificates where the web browser validates that an SSL web server

[912163023]

Ok..



I've done that setup a couple of time before, I guess we won't have a problem setting it up with you..



First I need a bit more information:



Front-end you're talking about Exhange FE server.. right?



What version of exchange are you running 2000/2003.. God forbid 5.5

Will your NLB FE server be in a DMZ? How are the servers going to be accessed from the internet..?





Is there an ISA server publishing the servers? or the Virtual IP of the servers?



Check your Certificate properties.. in the Certificate information..



Issued to[/b] = ? (this is the Common Name .. when requesting the certificate)

Issued by[/b] = should be your CA



Do you see the sentence "You have a private key that corresponds to this certificate" at the bottom of the page?



Working to solve your problem..

More Information:

1. html - Cached - SimilarImporting Certificates from Another Platform into RACFImporting certificates into RACF
2. I think that there must be something wrong on the BES/MDS side because it is as if the root certificates are not imported correctly
3. Users who have already imported their smart card certificates are working fine
4. You can also import other's Internet certificates into Person documents in the Domino Directory
5. Import Certificates are a proposed mechanism to implement balanced trade, and eliminate a country's trade deficit
6. After successfully importing the certificate, you will see a dialog box to accept the server's fingerprint
7. The Beacon/Profiler system web based UI is capable of using digital certificates so that the authenticity of the embedded web server on the Beacon
8. In the console tree in the left-hand pane expand the Certificates (Local Computer) node, and then the Personal node
9. Solving the -1 226 Error ConsoleOne Method Importing a Thawte Certificate in OES Linux

[trungtimo]

Zingo, you the man! Thanks a ton for looking in to this for us.



Responding to your queries below:



We are talking Exchange 2003 FE in the DMZ. These servers will have virtual IPs and in the cert properties I get the following:



Issued to: www.XXXXXX.com

Issued from: Starfield Secure Certifcate Authority



And yes, I do see "You have a private key that corresponds to this certificate" at the bottom.



I'm kind of new to the certificate thing and all my superiors want to do is apply the Private Key from Server X to Server Y. I Still get that �this certificate has already been applied on another server� message.



Thanks a ton again.

More Information:

1. You can also import and export Internet certificates for use between
2. Step 16: You will be taken back to your Certificates menu
3. I encountered a problem when importing a chained SSL cert
4. When I browse for importing a new certificate, the file
5. In the brochure called Importing Commercial Goods Into Canada, we have provided step-by-step instructions on how to complete Form B3
6. 4 does not support such certificates and therefore does not recognize them as valid X
7. Once the certificates are unzipped into multiple certificates prior to importing into the SonicWALL SSL Offloader, the certificate will need to be imported using the chained certificate
8. Be very careful to ensure the certificate is valid prior to importing it as a "trusted" certificate! View it first (using the keytool