Problem
When installing a certificate using Microsoft IIS 7.0, you may receive one of the following error messages:
Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created.
There was an error while performing this operation
Details: CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met.
0x8009310b (ASN:276)
Note: The certificate may already be installed regardless of the error message
Cause
This issue occurs because IIS Manager performs a lookup operation to look for a friendly name of the certificate during the installation. However, the code that performs this lookup operation misses this specific case, and it does not know how to retrieve the friendly name of a certificate in a PKCS#7 file. Therefore, the lookup operation fails, and you receive the error message.
Resolution
To resolve this problem, perform the following steps:
1. Open the certificate snap-in in MMC on the web server.
2. Go to Personal, Certificates, then right-click the certificate
3. Click Properties and enter a Friendly Name Value
4. Enter a Friendly Name value.
It may be possible to amend by creating a new CSR.