When you try to install a certificate from a PKCS#7 file by using Internet Information Services (IIS) 7.0 Manager, you may receive one of the following error messages:
Error message 1
Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created.
Error message 2
There was an error while performing this operation
Details: CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b (ASN:276)
The certificate is installed correctly despite the error message.
This issue occurs because IIS Manager performs a lookup operation to look for a friendly name of the certificate during the installation. However, the code that performs this lookup operation misses this specific case, and it does not know how to retrieve the friendly name of a certificate in a PKCS#7 file. Therefore, the lookup operation fails, and you receive the error message.
To resolve this problem, add a friendly name to the certificate. To do this, follow these steps:
- Click Start, click Run, type certmgr.mmc, and then click OK.
- Click File, click Add/Remove Span-ins.
- Select Certificates, and click Add, and then click OK.
- Select Computer account, and click Next, and then click Finish.
- Click OK.
- Expand Certificates (Local Computer), and Personal, and then Certificates.
- Right-click the certificate, and then click Properties.
- Edit the Friendly name field.
This issue is scheduled to be resolved in Windows Server 2008 service pack 3.