Microsoft IIS 5 & 6 SSL Certificate Installation Instructions
DigiCert SSL Certificate Installation - Microsoft IIS 5-6
http://www.digicert.com In this step-by-step tutorial we will show you how to install an SSL Certificate in Microsoft IIS 5 and 6 (up to Windows Server 2003). We will walk you through downloading the ...
Generating a SSL Certificate in Microsoft
IIS 5 & 6
1. Begin first by Opening the ZIP File in which you have your Certificate located within; and copy the file saved as
your_domain_name.cer to the Desktop of the web server in which you wish to secure.
2. Next, access the Administrative Tools. Open the "Internet Services Manager." Next, Right-Click on the
"Default Website" (or the CSR Website that was previously created) and Select Properties.
NOTE: The Certificate can ONLY be installed on the same Website in which the CSR was created on.
3. Next, Select the "Directory Security Panel" tab at the top of the Default Web Site Properties Menu.
Click on the "Server Certificate" button. By clicking on the "Server Certificate" button it will initiate
the Certificate Wizard. Click Next.
4. Next, click on the option titled, "Process the pending request and install the certificate" and Click Next.
5. Next, click "Browse" to search for the SSL Certificate. You can locate your_domain_name.cer and
then Click Next. Follow the Wizard Guidelines to finish the process.
Testing Your Certificate:
Once you have finished the Wizard Installation Process, in most situations the IIS will not require a restart, and
the new certificate will begin instantly. There are certificate testing tools available to ensure that the certificate has
been properly installed.
To test your certificate the most effective way is to use a browser and view its secure URL using a browser other than
Internet Explorer. Using another browser, other than Internet Explorer is required because the Internet Explorer is able
to verify that the site is trusted even if there is not an Intermediate Certificate. Therefore, other browsers will provide
a better test because it will state that the site is not trusted. If the alternative browsers state that the site is not
trusted, but Internet Explorer states that the site is trusted, then an Intermediate Certificate most likely will need to be
installed.
In some instances you mayweed to restart your entire server if the server continues to use old certificates.
Back-Up The Certificate and Private Key:
In case of an unexpected crash of one's server, it is very important to keep a backup of both the certificate and private key.
The private key is NOT included with the certificate files; and the Certificate is NOT functional without the private key.
Therefore, it is very important to back-up both the certificate and the private key. This can be accomplished by
following the PFX Export Instructions as a .pfx file.
Import the Intermediate Certificate:
In most cases, this step may not be necessary. However, if a "warning" stating that the certificate was
provided by a company that is not trusted, then following the instructions below will address that specific issue.
1. Download the Certificate file from inside your account and save it to your desktop.
2. Next, double-click on the certificate. This will open the certificate for viewing.
3. Click on the General Tab at the top. At the bottom of the "General Tab" click on "Install Certificate" button.
The Wizard Instructions will begin. Click Next.
4. Choose the option "Place All Certificates In the Following Store" and then Click Browse.
5. Click the "Show Physical Stores" option, then expand the Intermediate Certification Authorities Folder.
Select the "Underlying Local Computer Folder" then click OK. Click the Next button and then click the Finish button.
6. This concludes the Intermediate Certificate Installation. Restarting your server may be necessary.
Generating a SSL Certificate in Microsoft
IIS 5 & 6
Back To Guides