Welcome to ISAserver.org

Windows 2008 certificate

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Threat Management Gateway (TMG) Beta] >> General >> Windows 2008 certificate

Page: [1]

Message

<< Older Topic Newer Topic >>

Windows 2008 certificate - 8.Sep.2008 4:04:47 AM

Mattias_R

Posts: 4
Joined: 8.Sep.2008
Status: offline

I´ve set up a Win 2008 AD CS and imported a certificate into TMG that I want to use for my TS Gateway server.
When I create a weblistner in TMG and choose certificate it says that
the certificate is invalid(incorrect key type).
When I do the exactly same thing in ISA2006 with the same cert it work perfectly.
Any ideas ?

Post #: 1

Featured Links*

RE: Windows 2008 certificate - 8.Sep.2008 8:43:24 AM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

What certificate template did you use?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Mattias_R)

Post #: 2

RE: Windows 2008 certificate - 8.Sep.2008 8:53:22 AM

Mattias_R

Posts: 4
Joined: 8.Sep.2008
Status: offline

I duplicated the Computer Template

/Mattias

(in reply to tshinder)

Post #: 3

RE: Windows 2008 certificate - 8.Sep.2008 9:05:32 AM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

TMG expects a Web site certificate, maybe that's the problem?

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Mattias_R)

Post #: 4

RE: Windows 2008 certificate - 8.Sep.2008 9:47:55 AM

Mattias_R

Posts: 4
Joined: 8.Sep.2008
Status: offline

I duplicated the Web Server template certificate, stil same error.

The name in the Subject line of the server certificate match.
The intended purpose of the certificate is server authentication
The certificate has a corresponding private key etc......

(in reply to Mattias_R)

Post #: 5

RE: Windows 2008 certificate - 9.Sep.2008 8:12:11 AM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Is the CA certificate stored in the trusted root certification authorities store?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Mattias_R)

Post #: 6

RE: Windows 2008 certificate - 9.Sep.2008 9:47:16 AM

Mattias_R

Posts: 4
Joined: 8.Sep.2008
Status: offline

Yes it is.
When i try to select a certificate in the weblistner I can see that the root cert is also
invalid, it says correctly installed but private key is missing.
When I use the exactly same cert on ISA2006 it works perfectly.
I also tried a third party cert and this works on both ISA and TMG.

/Mattias

(in reply to tshinder)

Post #: 7

RE: Windows 2008 certificate - 10.Sep.2008 10:53:15 AM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Mattias,

Hmm. Could be a bug. Let the TMG know about this and see if they have a fix.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Mattias_R)

Post #: 8