Microsoft IIS 8 SSL Certificate Installation Instructions

Generating a SSL Certificate in Microsoft IIS 8
1. First, begin by opening the ZIP file which contains your Certificate. Then save the file named your_domain_name.cer to your desktop of the server in which you are securing.

2. Click on and then Open the Internet Information Services (IIS) Manager which can be accessed from the Start Menu.

3. Next, Click on the Server Name.

4. Double-Click on the "Server Certificates" button which is located in the IIS Section in the Center Menu.

iis8Picture6
5. Next, click on the menu titled, "Actions" which is located to the Right of the Screen. Then Click on the Action titled, "Complete Certificate Request" By clicking on this action, the Complete Certificate Request Wizard will launch.

iis8Picture7

iis8Picture8
6. Next, Browse the file name you have saved in the format your_domain_name.cer. This will have been provided to you. At this point you will then be asked to enter a "friendly name" for the file. It is NOT part of the actual certificate, but it helps the Server Administrator easily identify the Certificate. Place this certificate into the Personal Certificate Store.

7. Select OK and this will install the Certificate to the actual Server.

8. Now that the SSL Certificate has been installed to the server, it will be appropriate to assign the certificate to the website using IIS.

9. Next, from the Internet Information Services (IIS) Manager window, click on the Connections menu and select the server name where the certificate was installed.

10. Click on "Sites" and then select the option that states, "select the site to be secured with SSL."

iis8Picture9
11. Next, on the right of the screen will be a menu titled, "Actions" under that menu click on the selection "Bindings." After you have selected "Bindings" a new window will open titled, "Site Bindings."

12. When the window titled, "Site Bindings" has been opened, click on "Add" which is located to the right of the screen.

iis8Picture10

iis8Picture11
13. After selecting the "Add" option, under "Type" select https. Under IP Address, you must select the IP address of the specific site in which you are using or select "All Unassigned." The port blank box, in which the traffic will be secured by SSL is 443 in most cases. The SSL Certificate blank should already indicate that the certificate has been installed during Step Seven.

14. After filling in the blanks located in Step 13, select "OK"

iis8Picture12
15. The SSL Certificate has not been completely installed and the website has been programmed to accept Secure Connections.

Installing and Configuring your SSL Certificate on Microsoft IIS 8 and Microsoft IIS 8.5 (Using Multiple Certificates Using SNI).


iis8Picture13
1. First, begin by opening the ZIP file which contains your Certificate. Then save the file named your_domain_name.cer to your desktop of the server in which you are securing.

2. Click on and then Open the Internet Information Services (IIS) Manager which can be accessed from the Start Menu.

3. Next, Click on the Server Name.

4. Double-Click on the "Server Certificates" button which is located in the IIS Section in the Center Menu.

iis8Picture14
5. Next, click on the menu titled, "Actions" which is located to the Right of the Screen. Then Click on the Action titled, "Complete Certificate Request" By clicking on this action, the Complete Certificate Request Wizard will launch.

iis8Picture15
6. Next, Browse your_domain_name.cer file that was provided and enter a "friendly name" in the box labeled friendly name. The Friendly Name is NOT part of the actual certificate, but it is used by the Administrator to easily identify the Certificate. In the "Select a Certificate Store for the New Certificate" box choose Web Hosting Certificate Store.

7. Click "OK" to Install the Certificate to the server.

NOTE: There has been a known issue regarding the installation process using IIS 8. The following error has been received, "Failed to remove the certificate." If you receive that error and it is the same server in which the CSR has been installed, then the certificate is more than likely actually installed. In that instance, just cancel the dialog box and refresh the list of server certificates by selecting F5. The new certificate should now be on the list, and that means it did install to the server. However, you might still wish to double check this and make sure the certificate is in the "Web Hosting Certificate Store." If it is NOT located there, this is the time you may now move it to that location. If it is not on the list, then you will have to reissue your certificate with a NEW CSR. Once you have created a NEW CSR then you may click on the re-key button for the certificate.

8. After the SSL certificate has been successfully installed to the server, this is the time which you will need to assign that certificate to the website using IIS.

9. Next, from the Internet Information Services (IIS) Manager window, click on the Connections menu and select the server name where the certificate was installed.

10. Click on "Sites" and then select the option that states, "select the site to be secured with SSL."

iis8Picture16
11. Next, on the right of the screen will be a menu titled, "Actions" under that menu click on the selection "Bindings." After you have selected "Bindings" a new window will open titled, "Site Bindings."

iis8Picture17
12. When the window titled, "Site Bindings" has been opened, click on "Add" which is located to the right of the screen.

iis8Picture18
13. After selecting the "Add" option, under "Type" select https. Under IP Address, you must select the IP address of the specific site in which you are using or select "All Unassigned." The port blank box, in which the traffic will be secured by SSL is 443 in most cases. The SSL Certificate blank should already indicate that the certificate has been installed during Step Seven.

14. After filling in the blanks located in Step 13, select "OK"

iis8Picture19
15. The SSL Certificate has not been completely installed and the website has been programmed to accept Secure Connections.

16. Repeat the steps for creating the CSR for the second or greater sites.

17. Install the Certificate file (continue through step 12).

iis8Picture20
18. In the box titled, "Type" select https. In the box titled, IP Address, make sure that you use the IP address of the site or select "All Unassigned." In the box titled, "Port" in which the traffic will be secured by the SSL choose 443. In the box titled, "Host Name" enter the host name that you are securing and check the box that states "Require Server Name Indication." This step is required for all additional sites OTHER than the Primary Site. The "SSL Certificate" box is where you should enter the certificate that was installed in Step 7 (For the additional certificate).

19. Select "OK"

20. The SECOND SSL Certificate has now been successfully installed, and the website has been programmed to "Accept Secure Connections."

21. Repeat steps 16-19 if you need to set up any additional websites.

Generating a SSL Certificate in Microsoft IIS 8
Back To Guides