Ordering and
Installing a Verisign Security Certificate
Added: 1/15/02
Article ID#: KI0011
Prior
to ordering/installing a Security Certificate, a customer must:
- Obtain
the IP address or common name of your Primary and Secondary DNS server. This information may be found from your Internet
provider.
- Register
the Domain Name (the common name that will be used for the IRM, ie IRM.resortdata.com).
This can be done with a variety of companies, www.internic.net
supplies a list of accredited Domain Name Registrars.
Be sure to include your primary and secondary DNS information.
To
order and install a Security Certificate / SSL with Verisign:
- Access
www.verisign.com.
Under Small/Medium business, select “Make your site secure”.
- Select
‘Buy’ under Secure Site Services.
After selecting ‘Buy Now’ and ‘Continue’. With Standard
Enrollment, the SSL is processed more quickly, but more information is
needed from the property, including a Dun and Bradstreet ID Number.
Express Enrollment requires less information, but takes longer to
process.
- Follow
the directions outlined by Verisign.
To create a Certificate Signing Request (CSR):
-
From the IRM
Bridge Computer, Open Internet Information Services (IIS)
-
Double Click
on the name of the IRM.
-
Right click
on Default Web Site.
-
Select
Directory Security.
-
Select
Server Certificate.
-
Select ‘Create a new certificate.
Click Next.
-
Select
‘Prepare the request now, but send it later.’
Click Next.
-
The
Certificate Name should be something easy to Reference, ie. IRM.
-
Bit length
should be 1024 or above, it does not have to match the bit length chosen
from Verisign.
-
Organization
or Company = The Organization named when registering the Domain Name.
Organizational Unit can be a subunit of the Organization, such as
“Hotel Front Desk.” Click
Next
-
The common
name is the domain name registered, for example IRM.resortdata.com.
Click Next.
-
City and
State must both be spelled out, no abbreviations. Click Next.
-
Save the file
as C:\certreq.txt. It will have
to be copied to complete the order. Click
Next.
-
Click Next.
-
Click Finish.
-
If you
receive any errors, be sure there is no inappropriate abbreviations or punctuation
has been used.
To
submit the CSR
-
Go to Start |
Programs | Accessories | Notepad. Open
c:\certreq.txt. Highlight all
text. Right Click, select copy.
-
Return to the
Verisign order, right click in the box for ‘Submit CSR’ and select
Paste. The certificate request
information will be pasted.
-
The ‘Server
Software Vendor’ is Microsoft.
- Within
2-7 days, Verisign will e-mail the completed Certificate
Installing a Security Certificate
- Open
the e-mail from Verisign with the Subject Line “Verisign Secure Server
ID”
- Highlight
the Certificate at the end of the e-mail, beginning with “-----BEGIN
CERTIFICATE---“. Right
Click and Select Copy.
- From
Start | Programs | Accessories, open Notepad.
Right click, select Paste.
- Save
the Certificate on the Network as ssl.cer.
- From
the IRM Bridge, open IIS.
- Right
click on Default Web Site. Select
Properties. Select
Directory Security.
- Select
Server Certificate. Select
Next.
- Select
‘Process the pending request and install the certificate.”
Select Next.
- Click
Browse. Select ssl.cer.
- Click
Next. Click Finish.
- Open
the IRM and go to the monitor.asp page.
Select IRM Configuration Options.
- Check
the box “SSL Certificate Installed.”
Save the settings.
- Restart
IIS.
- If the SSL settings are altered in IIS, it has the potential to
conflict with the IRM
