Installing a certificate without a backup

"Todd Oakley" <oakertood.DeleteThis@yahoo.com> wrote in message
news:683fc4e9.0402231125.28b4e893@posting.google.com...
 > Our server crashed a week or so ago. The backup of the cert was on the
 > drive that failed, and our ISP/MSP did not backup that disk
 > (unbeknownst to us!).
 >
 > I have the cert e-mail from the CA. Is there anyway I can import the
 > cert back onto the server without issueing a new request? I was able
 > to import the cert on the server, but SSL doesn't work -- get a DNS
 > error.
 >
 > Thanks in advance!


Todd,

I think that the reason you're getting this error even though you were able
to import the server cert is that the associated private key (which was
created when you created the server cert request) is no longer on the
system/hard drive.

IIS/SSL will fail in such case. You can see this if you run SSLDiag. It'll
say "No private key".

I've never understood why this gives that error in this case (something
like cannot find DNS or server, right?).

I think that you'll need to generate a new server cert request and get a new
cert from the CA.

In the future, after importing the server cert from the CA and verifying
that it's ok (double click the cert in Explorer and it should say "You have
a private key), back the cert and private key up by exporting it WITH the
private key.

Jim<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Installing a certificate without a backup 

Thanks, Jabbersmith and Jim.

I thought I would have to get a new cert, but I thought it was worth a
try to investigate.

-todd


*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!
 >> Stay informed about: Installing a certificate without a backup