Certificate in IIS for https

[Joanne]

As part of the DirectAccess setup, it wants to be able to connect to an internal website to check if it is on site or off site. I have IIS setup on another server, it has its certificates, but when I browse to it I get:

 

 

In IIS it has 2 certificates. One is self signed and the other is from another server on the network.

 

Can anyone shed light? Google isn't helpful!

[Sagima]

I don't use direct access but my initial thoughts would be...

 

Don't use a self-signed cert. Use one from your CA which your domain machines will trust. If you do you need to use the self signed one add that machine to the trusted ca list using group policy

Make sure you are using the FQDN of the server everywhere so the names match up

[Joanne]

I seem to have cracked it - https://www.sslshopper.com/article-how-to-create-a-self-signed-certificate-in-iis-7.html

[Joanne]

I don't use direct access but my initial thoughts would be...

 

Don't use a self-signed cert. Use one from your CA which your domain machines will trust. If you do you need to use the self signed one add that machine to the trusted ca list using group policy

Make sure you are using the FQDN of the server everywhere so the names match up

 

I think my problem was that I wasn't using the full on https:\\SERVER.DOMAIN!!

 

Thanks