Self-Signed SSL Certificates with the QuickBooks Web Connector

To get self-signed SSL certificates to work with the QuickBooks Web Connector, you must import the certificate (and possibly the CA certificate) into Windows/Internet Explorer.

To test if your self-signed certificate is working correctly and will play nice with the Web Connector, visit the https: URL you're using in *Internet Explorer*. Firefox or another browser *will not help you test*, you must use Internet Explorer. ===== Internet Explorer 9/8 ===== When you visit the site for the first time, you'll get a page that says “There is a problem with this website's security certificate.” Click on the red shield that says “Continue to this website (not recommended).” Once you see the site, the address bar should be red. Click on the red X and choose “View Certificates”, then choose “Install Certificate.” In the Certificate Import Wizard, click Next. Choose “Place all certificates in the following store” Click “Browse” Select “Trusted Root Certification Authorities” and click OK. Click “Next”, then “Finish”, then “Yes” in the pop=up window. IE9 ad IE8 tested on Windows 7) ===== Internet Explorer 7 ===== ===== IIS 6.0 and lower - Generating and Installing to Server ===== If you have IIS 6.0 (Server 2003), follow these steps to generate and install a self-signed SSL certificate to your site. (copied from http://www.somacon.com/p42.php and http://www.visualwin.com/SelfSSL) Download IIS 6.0 Resource Kit Tools Cheap SSL Certificates Install the Resource Kit onto your server From the Windows Start Menu, go to the “\Programs\IIS Resources\SelfSSL” folder and select “SelfSSL”. Now, open the “Manage Your Server” application (usually in the start menu or desktop) and click on “Manage this Application Server” Expand “Internet Information Services (IIS) Manager” in the new “Application Server” window that popped up Expand the computer that's listed (should show the server's network name) Click on “Web Sites” In the right hand window, identify the site you are installing the certificate to (under “Description”). Note the “Identifier” for that site. Back in the SelfSSl command window, type in the following: selfssl /T /S:{Identifier from previous step} /V:3650 /N:cn={url of site with no slashes} e.g. selfssl /T /S:820937909 /V:3650 /N:cn=test.mysite.com Note: You can only have one SSL certificate per IP on port 443. If you have problems after running these commands, first open services.msc (from the run prompt - win+r) and restart the World Wide Web Publishing Service. If you are still having issues, look in the “Web Sites” folder from a few steps back and see if the “State” is “Stopped”. If it is, right click and try to start it. Also, make sure under “SSL Port” only one website has “443” listed.

quickbooks_ssl_selfsigned.txt · Last modified: 2013/01/21 12:44 (external edit)