When completing the certificate request in Internet Information Services (IIS) 8.0 Manager using a PKCS#7 file, the server may respond with the following error message:
There was an error while performing this operation.
CertEnroll::CX509Enrollment::p_InstallResponse:ASN1 bad tag value met. 0x8009310b (ASN: 267)
Microsoft IIS 8.0 may report an error during installation when using a PKCS#7 formatted certificate. Although the ASN1 error occurs during installation, the certificate may still install successfully.
To verify that the SSL certificate is successfully installed, try to bind the certificate to the web site.
To bind the certificate to the appropriate web site, perform the following steps:
If in step 6 above, you cannot find the new certificate in the list, try restoring the private key:
Import certificate in to the Computer certificate store
Restore Private Key
Open a command prompt (Go to Search > type cmd in search box), then enter the following command:
certutil -repairstore my "<thumbprint>"
certutil -repairstore my "00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f"
If successful, the response will be "CertUtil: -repairstore command completed successfully"
Assign SSL certificate in IIS
Note: If the above steps do not resolve the issue, a reissue of the certificate will be necessary. Refer to the following KB solution for reissue steps
For Reseller or Partner Order: SO5989
For Retail Customer with GeoTrust Security Center (GSC) Account: SO22159
For Enterprise Customer with GeoTrust Enterprise Security Center (GESC) Account: SO21129