ITS 620 and SSL

[Former Member]

I have implemented ITS 620 patch 19 and need to set up SSL for production however struggling to find any useful information on how SSL works with ITS and how to actually set it up.

For my Dev environment I am using Win 2000 IIS 5, however this is all on a single host environment. For IST I have a dual installation and have a Wgate on Windows 2000 IIS 5 and a Agate on another server which is also Windows 2000.

For UAT the operating system has changed to Windows 2003 and IIS 6. The Wgate resides on a separate server and I also have two separate agate servers loadbalancing.

For production my webserver will reside within the DMZ and the agates within the internal network however I am required to enable SSL. Any information would be helpful.

I have read OSS note 688295, however it has not really shed any light. I am assuming some configuration is required within IIS and ITS. Any help would be greatly appciated.

Thanks in advacne

[Former Member]

Hello Ajay,

see thread

Regards,

Fekke

[Former Member]

Hi Fekke, I read this thread before I raised this note however it did not help me progress. Within IIS I go to create a certificate but a .txt file is create when I go to process and install the certificate it looks for a .cer file. How is this .cer file created as the file created within IIS is a .txt file

[Former Member]

Hi Ajay,

the IIS doesn't create a Certificate! The .txt file is a Request. Now you have to send this Certificate to a CA.

You can create a CA your own, with the MS Certificate Service or with openssl in linux.

If you just wanna test something you can get a certificate with Thawte Demo-Cert (https://www.thawte.com/ucgi/gothawte.cgi?a=w44700158187049000)

Or a Free-Certificate with CA-Cert (https://www.cacert.org)

After you send the Request you will get the desired .cer File.

Regards,

Marco