Create new CSR from IIS for portal.magnumlog.com (Use Wildcard if possible) -


Upload CSR to godaddy for new cert files. Download Cert Files.


Complete request in IIS - copy cert response text into IIS


Export PFX file from MMC cert.


Copy new cert pfx into Apache2.4.51\bin folder (same location as openssl)


Run openssl, run these commands -


# Export the private key file from the pfx file


openssl pkcs12 -in filename.pfx -nocerts -out key.pem


# Export the certificate file from the pfx file


openssl pkcs12 -in filename.pfx -clcerts -nokeys -out cert.crt


# This removes the passphrase from the private key so Apache won't

# prompt you for your passphase when it starts


openssl rsa -in key.pem -out server.key


Copy cert.crt and server.key files to C:\Tm4web\Magnum\


Add intermediary cert given by Godaddy - gd_bundle-g2-g1.crt to C:\TM4WEB\Magnum\


Rename .crt file to cff0ffa21f1594e7.crt (Will brick the service if you don't rename.)


Stop the apache tm4web service then restart it.



******OLD*********** -This was from when IIS didn't need the same cert as Apache


Open OpenSSL in Apache2.4.51/Bin


Enter: req -new -newkey rsa:2048 -nodes -out portal_magnumlog_com.csr -keyout portal_magnumlog_com.key -subj "/C=US/ST=ND/L=Fargo/O=Magnum Companies/OU=IT/CN=portal.magnumlog.com"


Upload CSR to GoDaddy to download new cert


Rename the .key file that was created in the Apache2.4.51\bin folder to server.key and copy to C:\Tm4web\Magnum\


Add downloaded cert to C:\Tm4web\Magnum\


Rename .crt file to cff0ffa21f1594e7.crt (Will brick the service if you don't rename.)


Stop the apache tm4web service then restart it.


Test site from off network and https://www.ssllabs.com/ssltest