KB172424 - Security Certificate Doesn't Match Internet Address

Article ID: 172424

Article Last Modified on 6/23/2005

Microsoft Internet Information Server 1.0

This article was previously published under Q172424

We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SYMPTOMS

When you access a Web site that has an SSL certificate installed, the following error may appear:

The Internet site you are about to view uses a security certificate that does not match its Internet address.

CAUSE

This error occurs if the hostname of the computer running Internet Information Server (IIS) has been changed since the certificate request was created and applied to the server.

WORKAROUND

To resolve this issue, do one of the following:

Rename the server with the name used when the digital certificate was created.

-OR-
Use the following steps to obtain a new digital certificate:
1. Generate a key pair file and a request file.
2. Request a certificate from a Certification Authority.*
3. Install the certificate on your server.
4. Activate PCT/SSL security on a WWW service directory.

MORE INFORMATION

Digital certificates can be obtained from Verisign. For more information, point your browser to:

http://www.verisign.com/microsoft/

You can find more information on the implementation of PCT/SSL in the "Microsoft Internet Information Server Installation and Planning Guide," pages 58 - 63.

Keywords: kbenv kbprb KB172424