in XenMobile 10, the FQDN of the XenMobile server, the FQDN of the XenMobile server cluster, the FQDN of the MDM lb, and the FQDN of the Mam lb are the same. (Note: LB, load-balanced English word shorthand). So in the process of making a server certificate, we only need to apply for a wildcard certificate.
If we use a public network certificate, then it is automatically trusted.
If our server certificate is issued by our own internal CA, then we need to make some necessary configuration.
First step: Request a server certificate
Open IIS and click Create Domain certificate, as long as our machine has been added to the domain environment and the CA has been created in the domain environment
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/5C/AB/wKioL1UegkDwnlbrAAJC3qvukC4993.jpg "title=" 1.jpg " alt= "Wkiol1uegkdwnlbraajc3qvukc4993.jpg"/>
Fill in the information for the certificate request
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/5C/AD/wKioL1Uegtqyhx0xAAFYa1recUA119.jpg "title=" 3r_w0i ' 7_8y2$y0uzc@{tct.png ' alt= "wkiol1uegtqyhx0xaafya1recua119.jpg"/>
Automatic CA and name, click Finish
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/5C/AE/wKioL1UegvaDiddhAAFPscbu7Go745.jpg "title=" Qq20150325113217.png "alt=" Wkiol1uegvadiddhaafpscbu7go745.jpg "/>
Certificate request succeeded, appears in IIS interface
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/5C/AF/wKioL1Uegy_jmUqNAAC4WvJ2gNs896.jpg "title=" Qq20150325113250.png "alt=" Wkiol1uegy_jmuqnaac4wvj2gns896.jpg "/>
Step Two: Convert the server certificate to a certificate in PFX format
Click on the requested server certificate and select Export
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/5C/B5/wKiom1UegkqTfi_iAAGOJ4n_2g0731.jpg "title=" Qq20150325113322.png "alt=" Wkiom1uegkqtfi_iaagoj4n_2g0731.jpg "/>
Specify the storage path and name of the certificate export
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/5C/B5/wKiom1UegniSFFxMAAORUymS3n0391.jpg "title=" Qq20150325113357.png "alt=" Wkiom1uegnisffxmaaoruyms3n0391.jpg "/>
Enter a password, change the password by your own settings
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/5C/B6/wKiom1UegqjSw3ZjAADO8SjTbZE121.jpg "title=" Qq20150325113413.png "alt=" Wkiom1uegqjsw3zjaado8sjtbze121.jpg "/>
Successfully exported a certificate in PFX format
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/5C/B7/wKiom1UegtOSScJMAAGB-tHa8NY150.jpg "title=" Qq20150325113430.png "alt=" Wkiom1uegtosscjmaagb-tha8ny150.jpg "/>
To open an MMC console on an IIS server, add a snap-in
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/5C/B3/wKioL1UehD-BoIe9AAEM2NnPh50591.jpg "title=" Qq20150325113517.png "alt=" Wkiol1uehd-boie9aaem2nnph50591.jpg "/>
Select the Certificates snap-in, choose Add
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/5C/B3/wKioL1UehGfwbK9XAAH3-HzrRDA892.jpg "title=" Qq20150325113534.png "alt=" Wkiol1uehgfwbk9xaah3-hzrrda892.jpg "/>
Select my user account and click Done
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/5C/B3/wKioL1UehIPxUFJWAADC_FkbXBo812.jpg "title=" Qq20150325113544.png "alt=" Wkiol1uehipxufjwaadc_fkbxbo812.jpg "/>
Continue to click OK
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/5C/B9/wKiom1Ueg2fAy024AAKonViWzmo834.jpg "title=" Qq20150325113552.png "alt=" Wkiom1ueg2fay024aakonviwzmo834.jpg "/>
Click Personal, certificates, select All Tasks, import
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/5C/B4/wKioL1UehMPy4U6PAAFs87LDcvA967.jpg "title=" Qq20150325113608.png "alt=" Wkiol1uehmpy4u6paafs87ldcva967.jpg "/>
The Import wizard appears, click Next
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/5C/B9/wKiom1Ueg63Ti711AAGMkE_3ABQ547.jpg "title=" Qq20150325113616.png "alt=" Wkiom1ueg63ti711aagmke_3abq547.jpg "/>
Select Browse
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/5C/B5/wKioL1UehQyjLnDUAAFsZxp2gwQ597.jpg "title=" Qq20150325113623.png "alt=" Wkiol1uehqyjlnduaafszxp2gwq597.jpg "/>
Select the PFX server certificate we just generated
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/5C/BA/wKiom1Ueg96gnc5JAAHZ32dMJ4M108.jpg "title=" Qq20150325113639.png "alt=" Wkiom1ueg96gnc5jaahz32dmj4m108.jpg "/>
Click Next
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/5C/B6/wKioL1UehUjDM6kjAAE7JdP4xgk774.jpg "title=" Qq20150325113649.png "alt=" Wkiol1uehujdm6kjaae7jdp4xgk774.jpg "/>
Enter the password you just created, tick 2, 3, and click Next
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/5C/B6/wKioL1UehVyjyhtNAAFqk1IVpRw655.jpg "title=" Qq20150325113707.png "alt=" Wkiol1uehvyjyhtnaafqk1ivprw655.jpg "/>
Save the certificate in personal storage and click Next
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/5C/B7/wKioL1UehYeiVH76AAEk50tkM5k298.jpg "title=" Qq20150325113718.png "alt=" Wkiol1uehyeivh76aaek50tkm5k298.jpg "/>
Click Finish to complete the certificate import work
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/5C/B7/wKioL1UehaWiBIfyAAFUeIz6ohQ831.jpg "title=" Qq20150325113726.png "alt=" Wkiol1uehawibifyaafueiz6ohq831.jpg "/>
Prompt for import success
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/5C/BC/wKiom1UehIChlYxDAAB6_Rhzydc024.jpg "title=" Qq20150325113731.png "alt=" Wkiom1uehichlyxdaab6_rhzydc024.jpg "/>
The imported certificate
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/5C/B8/wKioL1UehdeCaegwAACIR4WOs7s519.jpg "title=" Qq20150325113741.png "alt=" Wkiol1uehdecaegwaacir4wos7s519.jpg "/>
Select the certificate we just imported, select Export
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/5C/B8/wKioL1Uehe2DVHGkAAEjibEZkQw847.jpg "title=" Qq20150325113751.png "alt=" Wkiol1uehe2dvhgkaaejibezkqw847.jpg "/>
Start Export Certificate Wizard
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/5C/BD/wKiom1UehMqx2za5AAGFtcLXVQ8216.jpg "title=" Qq20150325113759.png "alt=" Wkiom1uehmqx2za5aagftclxvq8216.jpg "/>
Tick, yes, export private key
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/5C/BE/wKiom1UehOSybXM3AAE2wfApUQs588.jpg "title=" Qq20150325113811.png "alt=" Wkiom1uehosybxm3aae2wfapuqs588.jpg "/>
Select personal Information Exchange, tick if possible, the data includes all certificates in the certification path
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/5C/BE/wKiom1UehPzBA2MVAAGJJRw5R44372.jpg "title=" Qq20150325113825.png "alt=" Wkiom1uehpzba2mvaagjjrw5r44372.jpg "/>
Export the storage path and name
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/5C/BF/wKiom1UehTewG6FjAALkqOeO1KI043.jpg "title=" Qq20150325113942.png "alt=" Wkiom1uehtewg6fjaalkqoeo1ki043.jpg "/>
Click Next
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/5C/BA/wKioL1UehpjBdH8fAADSUzuQdO0878.jpg "title=" Qq20150325113950.png "alt=" Wkiol1uehpjbdh8faadsuzuqdo0878.jpg "/>
Click Finish to introduce the Export Certificate Wizard
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/5C/BB/wKioL1Uehqvy1PZRAAGHRA8EUyA808.jpg "title=" Qq20150325113958.png "alt=" Wkiol1uehqvy1pzraaghra8euya808.jpg "/>
Prompt for export success
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/5C/C3/wKiom1UehZWwq89JAABYaQKOrhg175.jpg "title=" Qq20150325114003.png "alt=" Wkiom1uehzwwq89jaabyaqkorhg175.jpg "/>
At this point, our server certificate is finished!
This article is from "I take fleeting chaos" blog, please be sure to keep this source http://tasnrh.blog.51cto.com/4141731/1628123
XenMobile 10 Server Certificate making