证书存储中已安装的SSL证书，但它不在IIS证书列表中 [英] Installed SSL certificate in certificate store, but it's not in IIS certificate list

问题描述

在证书存储区中安装通配符SSL证书后，证书不会出现在IIS证书列表中以用于站点绑定。

After installation of a wildcard SSL certificate into the certificate store, the certificate does not appear in the IIS certificate list for use with site bindings.

证书已安装正确，但显然没有密钥包含在证书中。

The certificate was installed correctly, but apparently no key was included with the certificate.

如何在不执行新请求或联系某人获取密钥的情况下解决此问题（例如，如果这是发布前一天？;-)）

How can you fix this issue without doing a new request or contacting someone for the key (if, for instance, it's the day before a launch? ;-) )

推荐答案

我今天遇到了这个问题。由于时间范围和其他一些问题，无法从提供商处获取密钥。

I ran into this problem today. Due to the timeframe and some other issues, getting the key from the provider was not possible.

我在这里找到了以下解决方案（http://blogs.msdn.com/b/vijaysk /archive/2009/05/22/disappearing-ssl-certificates-from-iis-7-0-manager.aspx ，在pixelloa的评论下），并认为在StackOverflow上得到答案也是一件好事。

I found the following solution here (http://blogs.msdn.com/b/vijaysk/archive/2009/05/22/disappearing-ssl-certificates-from-iis-7-0-manager.aspx, under pixelloa's comment) and thought it would be good to have the answer on StackOverflow as well.

如果证书没有私钥，您可以通过执行以下操作来解决此问题：

If the certificate does not have a private key, you can fix this by doing the following:

要解决此问题，请使用MMC管理单元将证书导入PERSONAL，
单击它并获取序列号#line。转到dos，运行certutil
-repairstore我的在这里粘贴序列号（你需要引号）然后用个人证书刷新MMC，右键单击它 - 导出 - 选择
除DELETE PRIVATE KEY之外的一切，打得好。然后转到IIS和
IMPORT证书而不是完成请求。

To fix this, use the MMC snapin to import the cert into PERSONAL, click it and grab the serial # line. Go to dos, run certutil -repairstore my "paste the serial # in here" (you need the quotes) then refresh MMC with personal certs, right click it - export - select everything except DELETE PRIVATE KEY, hit ok. Then go to IIS and IMPORT cert instead of finish request.

为了它的价值，我实际上只需做运行 certutil -repairstore 命令，我的证书有效。我确实运行了导出并为导出本身设置了密码，但我没有重新导入证书。证书现在显示在IIS的证书列表中，可以用于HTTPS绑定。

For what it's worth, all I actually had to do was run the certutil -repairstore command, and my certificate worked. I did run the export and set a password for the export itself, but I did not have to reimport the certificate. The certificate now shows up in IIS's list of certificates and can be used for HTTPS bindings.

我希望这有助于某人。

这篇关于证书存储中已安装的SSL证书，但它不在IIS证书列表中的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！