Microsoft IIS 7 SSL Certificate Installation Instructions

Generating a SSL Certificate in Microsoft IIS 7
1. Begin first by Opening the ZIP File in which you have your SSL Certificate located within; and copy the file saved as your_domain_name.cer to the Desktop of the web server in which you wish to secure.

2. Next, Open the Internet Information Services (IIS) Manager. Using the Windows Start Menu, click on Administrative Tools and then Open the "Internet Information Services (IIS) Manager."

iis7Picture6
3. Under the Internet Information Services (IIS) Manager, click on Connections and select the Server's Name.

4. Looking at the Center Menu, double-click on the "Server Certificates" of the IIS Section.

iis7Picture7
5. Selecting the Actions Menu, Click on the "Complete Certificate Request" and that will open the Wizard Instructions

iis7Picture8
6. Using the Complete Certificate Request Wizard; and clicking on the "Specify Certificate Authority Response Page" click on the File name that contains the certification authorities response. Browse the cercertificate file. Select the file and click Open.

7. In the box titled, "Friendly Name" enter a name for the certificate. This is just a friendly name to help identify the certificate.

8. Click OK to begin Installation of the SSL Certificate to the Server.

NOTE: There has been a known issue surrounding installation of IIS 7. The following error messages have been known to be displayed, "Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created." Or, "ASN1 bad tag value met."

The Solution to these error messages: if this is the same server in which the CSR IIS 7 was created, then in most instances the certificate is actually installed. The solution is to close the Internet Information Services (IIS) Manager and restart it to refresh the server certificates list.

If even after the Internet Information Services (IIS) Manager is restarted and refreshed, the server certificate is NOT on the list, then you need to either Reissue your certificate or use the Certificate Utility for Windows to import the certificate to your IIS 7 server.

9. After you have installed the SSL Certificate to the Server, you still must assign the certificate to the appropriate website.

Using Microsoft IIS 7 to Assign the Certificate to Your Website


iis7Picture9
1. Access the Internet Information Services (IIS) Manager and Click on the Connections section. Then Expand Your Server's Name. Expand the "Sites" and then select the specific site you wish to secure using the SSL Certificate.

2. Click on the Actions menu. Click Edit Site and then Click Bindings.

iis7Picture10
3. Under the "Site Binding" window, click "Add"

iis7Picture11

iis7Picture12
4. The "Add Site Bindings" Window has several drop down boxes. Enter the information requested and click OK. In the drop down box labeled "Type" select https. In the IP address drop down box select "All Unassigned." In the drop down box labeled Port, enter 443 (unless you are using a non-standard port for SSL traffic). In the drop down box labeled SSL Certificate, select your friendly name that you have created at the beginning of the installation process.

5. After completion of the above steps your SSL certificate has been properly installed and your website is fixed to accept secure connections.

Generating a SSL Certificate in Microsoft IIS 7
Back To Guides