Steve's blog

A blog about what's going on in Analysis UK...

How to install a 123-Reg Renewed Certificate in IIS 7

 

Problem: No Complete Certificate Request option because the certificate is a renewed one, so you didn't send of the request.

This one's caught me out a few times. First try completing the renewal process. If in IIS Manager -> Server Certificates you try to complete a renewal process you get:

Complete Certificate Request
There was an error while performing this operation.
Details:
CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b (ASN: 267)

If that files then:

See: http://blogs.msdn.com/b/webtopics/archive/2009/01/03/asn1-bad-tag-value-met-error-when-processing-a-certificate-request-in-iis-7.aspx

 

  • Open MMC -> Certificates -> Computer
  • Open the node Personal -> Certificates
  • Right click and Import the certificate .crt file
  • Double click the cert.
  • On Details tab find the thumbprint.
  • Open up a console
  • Enter:
  • certutil -repairstore my "<paste the cert thumbprint here>"
  • You should now be able to go back to IIS's Server Certificates page and see your cert.