cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Go to solution

Install Godaddy SSL on IIS 10 - Windows Server 2019

Hi,

I've purchased a https:// SSL certificate from godaddy. Then I followed the steps here to try and install in IIS 10 running on a Windows Server 2019 instance:

https://pk.godaddy.com/help/manually-install-an-ssl-certificate-on-my-iis-10-server-27349

But after step 24 the certificate disappears from the IIS cetificates list.

I'm sure there is a step missing as I am never prompted to use the private key.

 

These are the steps I followed to get the SSL certificate.

 

I followed the steps provided by Godaddy during a call, which involved using the Godaddy wizard to create a certificate.

During this process the godaddy wizard provided the following to download:

1. generated_private_key.txt

2. generated_csr.txt

When the wizard was complete I had to wait for validation of the certificate

I only had to wait an hour or so before the certificate was ready for download.

The Godaddy SSL portal provided a drop down, I selected IIS then a zip was downloaded which contained the following files:

{~longnumber~}.crt

{~longnumber~}.pem

gd-g2_iis_intermediates.p7b

 

I installed the .crt and .p7b files using MMC, and I can see them even after closing and reopening MMC so I think this is ok.

I installing the .crt in IIS (steps 17 -24), and they can be seen in the list of certificates.

But clicking on the sites folder and trying to bind them the list is empty. also clicking back into certifces they have disappeared - the list is empty here too.

Any help would be appreciated.

help.pnghelp2.png

help3.png

6 REPLIES 6
Super User III
Super User III
Solution

Re: Install Godaddy SSL on IIS 10 - Windows Server 2019

@mpgreen200 

 

I'm not a Windows / IIS person - but a quick google search found https://www.namecheap.com/support/knowledgebase/article.aspx/9773/2238/ssl-disappears-from-the-certi...

Which was updated in the last 2 weeks - this sounds exactly what you are describing.



I am a GoDaddy End User - Just Like You
Check out my site! | I currently manage over 300 WordPress Websites
* Please note that I offer free advice on this forum. If you would like personalized help, please contact me. Otherwise, please ask your question in the proper forum so the answer can assist EVERYONE in the community and not just you. Thanks! *

Once your issue is resolved,
please be sure to come back and click accept for the solution

Get Better Support on the Community Boards!
Etiquette When Asking for Help from the Community

Re: Install Godaddy SSL on IIS 10 - Windows Server 2019

@PL281 

Thanks very much for the web link.

This describes my problem exactly, and I am missing the key icon.

Problem is that OpenSSL doesnt seem to like the private key generated by godaddy (see footnote) so I cant use it to create a .pfx file. 

So I've decided to ditch this approach (using the godaddy generated key) and try creating the certificate request from IIS.

I've generated the CSR from IIS10: click on server -> Certificates -> Create Certificate request.

This creates a text file which I have uploaded to Godaddy: My Account -> SSL-> Manage certificate -> Rekey.

Hopefully this will allow me to use the private key already installed in the depths of my windows server instance.

I'll post back with how I get on.

 

Footnote:

I used this command in openssl:

 

> openssl rsa -in E:\https\GoDaddyKey\generated-private-key.txt -noout -text

I get this error:

> unable to load Private Key
22016:error:0906D06C:PEM routines:PEM_read_bio:no start line:crypto\pem\pem_lib.c:691:Expecting: ANY PRIVATE KEY

 

I can upload the key here if you dont mind taking a look - its redundant now I have requested a replacement.

Solution

Re: Install Godaddy SSL on IIS 10 - Windows Server 2019

Re: Install Godaddy SSL on IIS 10 - Windows Server 2019

You need to do two things...

1) Open generated-private-key.txt in Notepad++ and change the encoding from UTF-8=BOM to UTF-8
2) Run this command (use Cmder or something with openssl):

openssl pkcs12 -export -out mydomain.pfx -inkey generated-private-key.txt -in foobar703e609f5c.crt

This will create a .pfx file that you Import in IIS.  Wasted a lot of time until I did these steps.

Highlighted

Re: Install Godaddy SSL on IIS 10 - Windows Server 2019

Hi smoore4,
Would you mind explaining what this openssl line is doing?

Re: Install Godaddy SSL on IIS 10 - Windows Server 2019

https://www.openssl.org/

 

There are a few things that the open source community does way better than MS.  ssl commands are one of them.

 


@mpgreen200 wrote:
Hi smoore4,
Would you mind explaining what this openssl line is doing?