which store should you import the certificate?

HOTSPOT
You have a server named Server1 that has the Web Server (IIS) server role installed.
You obtain a Web Server certificate.
You need to configure a website on Server1 to use Secure Sockets Layer (SSL).
To which store should you import the certificate?
To answer, select the appropriate store in the answer area.

HOTSPOT
You have a server named Server1 that has the Web Server (IIS) server role installed.
You obtain a Web Server certificate.
You need to configure a website on Server1 to use Secure Sockets Layer (SSL).
To which store should you import the certificate?
To answer, select the appropriate store in the answer area.

Answer:

Explanation:

When you enable secure communications (SSL and TLS) on an Internet Information Services (IIS) computer,
you must first obtain a server certificate.
http: //technet.microsoft.com/en-us/library/cc740068(v=ws.10).aspx
If it is a Self Signed certificate, it only can be used on the local server machine.
If it is a public certificate, you’ll need to download the CA root certificate of the certificate and install the CA
root certificate into the Trusted Root Certificate Authorities store.
Root certificates provide a level of trust that certificates that are lower in the hierarchy can inherit. Each
certificate is inspected for a parent certificate until the search reaches the root certificate.
For more information about certificate, please refer to:
http: //technet.microsoft.com/en-us/library/cc700805.aspx
http: //support.microsoft.com/kb/232137/en-us
http: //www.sqlservermart.com/HowTo/Windows_Import_Certificate.aspx
http: //msdn.microsoft.com/en-us/library/windows/hardware/ff553506%28v=vs.85%29.aspx
http: //www.iis.net/learn/manage/configuring-security/how-to-set-up-ssl-on-iis
http: //support.microsoft.com/kb/299875/en-us
http: //technet.microsoft.com/en-us/library/dd163531.aspx
http: //blogs.msdn.com/b/mosharaf/archive/2006/10/30/using-test-certificate-with-reporting-services-2005-
to-establish-ssl-connection.aspx



Leave a Reply 3

Your email address will not be published. Required fields are marked *


sepp

sepp

I’ve read some artikles where people upgraded their server from 2008 to 2012 and had to move the certificate to the Web Hosting store to get it working again.

Also Web hosting is new with 2012 and designed to largly scale if you got hundreds of sites using ssl.

so i would stick to the “Web hosting” Store instead of personal.

can anyone confirm this?

Grifter

Grifter

From what I’ve read, the “Personal” certificate store is recommended for single certificate installation while the “Web Hosting” certificate store is used for multiple certificate installations using SNI. Since the question says nothing about multiple websites and that you obtained a single certificate the correct answer would be the Local Computer Personal.

http://www.iis.net/learn/get-started/whats-new-in-iis-8/iis-80-server-name-indication-sni-ssl-scalability

https://www.digicert.com/ssl-certificate-installation-microsoft-iis-8.htm