Generate CSR: SSL Certificate on SharePoint

deliengs

Well-Known Member
Joined
Apr 26, 2013
Messages
164
HI Everyone.
Was hoping i could some advice on the following:

We are adding an SSL certificate to a site we have based on SharePoint.
Its a 3 tier setup so it has a DB Server, App Server & WFE.
Where would i generate the CSR, on the APP Server or WFE?

I am guessing the WFE but i just want to make sure..

Thanks!!
 

deweyzeph

Executive Member
Joined
Apr 17, 2009
Messages
9,061
HI Everyone.
Was hoping i could some advice on the following:

We are adding an SSL certificate to a site we have based on SharePoint.
Its a 3 tier setup so it has a DB Server, App Server & WFE.
Where would i generate the CSR, on the APP Server or WFE?

I am guessing the WFE but i just want to make sure..

Thanks!!

It doesn't really matter where you generate it. The only thing is that you will need to complete the request on the same server that you generated the CSR on, and then you can export the private key and certificate as a pfx to whatever server you want to use it on.
 

deliengs

Well-Known Member
Joined
Apr 26, 2013
Messages
164
Thanks @deweyzeph.
I generated it on the WFE just to be safe.
You're right though, just need to make we install it correctly.
 

Jade @ Absolute Hosting

Absolute Hosting Representative
Company Rep
Joined
Nov 17, 2015
Messages
1,184
As stated, ensuring that the SSL is installed correctly along with its certificate chain.

Use Qualy's SSL Lab to confirm that your certificate has been correctly installed along with any other underlying protocol issues
https://www.ssllabs.com/ssltest/index.html

If you do run into cypher and protocol issues then take a look at Nartac IISCrypto to assist in resolving these.
https://www.nartac.com/Products/IISCrypto

We offer a range of certificates to our resellers including Comodo PositiveSSL from R94.00 Per Year or RapidSSL Certificates from R180.00 per year - more info here https://za.domains/ssl-certificates/
 

deliengs

Well-Known Member
Joined
Apr 26, 2013
Messages
164
As stated, ensuring that the SSL is installed correctly along with its certificate chain.

Use Qualy's SSL Lab to confirm that your certificate has been correctly installed along with any other underlying protocol issues
https://www.ssllabs.com/ssltest/index.html

If you do run into cypher and protocol issues then take a look at Nartac IISCrypto to assist in resolving these.
https://www.nartac.com/Products/IISCrypto

We offer a range of certificates to our resellers including Comodo PositiveSSL from R94.00 Per Year or RapidSSL Certificates from R180.00 per year - more info here https://za.domains/ssl-certificates/

Hi Jade
Thank you kindly for detailed response. The SSL Test tool is very helpful as well!
 
Top