在证书存储中安装了 SSL 证书，但它不在 IIS 证书列表中 [英] Installed SSL certificate in certificate store, but it's not in IIS certificate list

问题描述

将通配符 SSL 证书安装到证书存储区后，该证书不会出现在用于站点绑定的 IIS 证书列表中.

After installation of a wildcard SSL certificate into the certificate store, the certificate does not appear in the IIS certificate list for use with site bindings.

证书安装正确，但显然证书中没有包含密钥.

The certificate was installed correctly, but apparently no key was included with the certificate.

如何在不提出新请求或联系他人获取密钥的情况下解决此问题(例如，如果是发布前一天?;-) )

How can you fix this issue without doing a new request or contacting someone for the key (if, for instance, it's the day before a launch? ;-) )

推荐答案

我今天遇到了这个问题.由于时间限制和其他一些问题，无法从提供商处获取密钥.

I ran into this problem today. Due to the timeframe and some other issues, getting the key from the provider was not possible.

我找到了以下解决方案 这里(在 pixelloa 的评论下)并认为在 Stack Overflow 上也有答案会很好.

I found the following solution here (under pixelloa's comment) and thought it would be good to have the answer on Stack Overflow as well.

如果证书没有私钥，您可以通过执行以下操作来解决此问题:

If the certificate does not have a private key, you can fix this by doing the following:

要解决此问题，请使用 MMC 管理单元将证书导入计算机帐户的个人存储中，单击它并获取串行 # 行.转到 dos，运行 certutil-修复我的在此处粘贴序列号"(除非您从序列号中删除空格，否则您需要引号)然后使用个人证书刷新 MMC，右键单击它-导出-选择除了删除私钥之外的所有内容，点击确定.然后转到 IIS 和导入证书而不是完成请求.

To fix this, use the MMC snapin to import the cert into PERSONAL store of the computer account, click it and grab the serial # line. Go to dos, run certutil -repairstore my "paste the serial # in here" (you need the quotes unless you remove the spaces from the serial number) then refresh MMC with personal certs, right click it - export - select everything except DELETE PRIVATE KEY, hit ok. Then go to IIS and IMPORT cert instead of finish request.

就其价值而言，我实际上所要做的就是运行 certutil -repairstore 命令，并且我的证书有效.我确实运行了导出并为导出本身设置了密码，但我不必重新导入证书.该证书现在显示在 IIS 的证书列表中，并可用于 HTTPS 绑定.

For what it's worth, all I actually had to do was run the certutil -repairstore command, and my certificate worked. I did run the export and set a password for the export itself, but I did not have to reimport the certificate. The certificate now shows up in IIS's list of certificates and can be used for HTTPS bindings.

我希望这对某人有所帮助.

I hope this helped someone.

这篇关于在证书存储中安装了 SSL 证书，但它不在 IIS 证书列表中的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！