TMG and certificates

Problem: When you want to create a new listener for TMG FF and after you import the certificate, you will get this error  “Incorrectly installed” or “Private key handle error” , even your Certificate Chain installed in the Trusted Root and the certificate seem to be OK

FIX:

it seem that using the Import Certificate wizard from Windows Explorer not storing the certificate in the correct location, and the fix is to import the certificate manually.

How:

• Open the Certificate Manager Snap-in, Local machine. 
• Right-click on the folder “Personal” and chose “All Tasks”
• Click Import…

The Certificate Import Wizard is now opened, just follow the steps in the wizard. Where you need to choose a Certificate Store, leave the default option and click next.

Now you can create the listener,and it will work 

You can not install TMG 2010 SP2

When you try to install ForeFront TMG 2010 SP2 you got a failure telling:

"The upgrade patch cannot be installed by the windows Installer service because the program to be upgraded may be missing, or the upgrade patch may update a different version of the program. Verify that the program to be upgraded exists on your computer and that you have the correct upgrade patch.”

To fix this you have to install TMG SP1 UPDATE 1, you can download it from here
http://www.microsoft.com/en-us/download/confirmation.aspx?id=11445

and then you can download and install SP2