Problem
You may encounter this error:
Cannot find the certificate request that is associated with this certificate file. A certificate request must be completed on the computer where the request was created.
There was an error while performing this operation
CertEnroll::CX509Enrollment::p_InstallResponse:ASN1 bad tag value met. 0x8009310b (ASN: 267)
Cause
IIS 7.0 does not accept PKCS#7 formatted certificates.
Resolution
Although the ASN1 error occurs during installation, the certificate is usually successfully installed.
Step 1: Bind the certificate to the appropriate web site:
1. Click Start, Administrative Tools and Internet Information Services (IIS) Manager
2. Browse to your Server Name, Sites then Your SSL-based site
3. From the Actions pane, choose Bindings
4. In the Site Bindings window, choose Add
5. From the Add Site Bindings window, provide the binding type
6. Select the SSL certificate that will be used for this site
Note: If the SSL certificate is not available to bind, please see Step 2 below
7. Click OK
8. Test if the site is secure by using HTTPS
Step 2: Attempt to restore the Private Key:
If the private key still is on the server, it may be possible to install the certificate and restore the private key.
An alternative method of installation is the following:
- Acquire the SSL certificate in X.509 (PKCS#10) format and install
- Obtain the Intermediate CA and install this via Microsoft Management Console (MMC)
More info in TECHNET support here: http://support.microsoft.com/kb/959216