Microsoft IIS 8 SSL Certificate Installation Instructions
Generating a SSL Certificate in Microsoft IIS 8
1. First, begin by opening the ZIP file which contains your Certificate. Then save the file named your_domain_name.cer
to your desktop of the server in which you are securing.
2. Click on and then Open the Internet Information Services (IIS) Manager which can be accessed from the Start Menu.
3. Next, Click on the Server Name.
4. Double-Click on the "Server Certificates" button which is located in the IIS Section in the Center Menu.
5. Next, click on the menu titled, "Actions" which is located to the Right of the Screen. Then Click on the Action
titled, "Complete Certificate Request" By clicking on this action, the Complete Certificate Request Wizard will launch.
6. Next, Browse the file name you have saved in the format your_domain_name.cer. This will have been provided to you.
At this point you will then be asked to enter a "friendly name" for the file. It is NOT part of the actual certificate,
but it helps the Server Administrator easily identify the Certificate. Place this certificate into the Personal Certificate
Store.
7. Select OK and this will install the Certificate to the actual Server.
8. Now that the SSL Certificate has been installed to the server, it will be appropriate to assign the certificate
to the website using IIS.
9. Next, from the Internet Information Services (IIS) Manager window, click on the Connections menu and select the
server name where the certificate was installed.
10. Click on "Sites" and then select the option that states, "select the site to be secured with SSL."
11. Next, on the right of the screen will be a menu titled, "Actions" under that menu click on the selection "Bindings."
After you have selected "Bindings" a new window will open titled, "Site Bindings."
12. When the window titled, "Site Bindings" has been opened, click on "Add" which is located to the right of the screen.
13. After selecting the "Add" option, under "Type" select https. Under IP Address, you must select the IP address of the
specific site in which you are using or select "All Unassigned." The port blank box, in which the traffic will be secured
by SSL is 443 in most cases. The SSL Certificate blank should already indicate that the certificate has been installed during
Step Seven.
14. After filling in the blanks located in Step 13, select "OK"
15. The SSL Certificate has not been completely installed and the website has been programmed to accept Secure Connections.
Installing and Configuring your SSL Certificate on Microsoft IIS 8 and Microsoft IIS 8.5
(Using Multiple Certificates Using SNI).
1. First, begin by opening the ZIP file which contains your Certificate. Then save the file named your_domain_name.cer
to your desktop of the server in which you are securing.
2. Click on and then Open the Internet Information Services (IIS) Manager which can be accessed from the Start Menu.
3. Next, Click on the Server Name.
4. Double-Click on the "Server Certificates" button which is located in the IIS Section in the Center Menu.
5. Next, click on the menu titled, "Actions" which is located to the Right of the Screen. Then Click on the Action
titled, "Complete Certificate Request" By clicking on this action, the Complete Certificate Request Wizard will launch.
6. Next, Browse your_domain_name.cer file that was provided and enter a "friendly name" in the box labeled friendly name.
The Friendly Name is NOT part of the actual certificate, but it is used by the Administrator to easily identify the
Certificate. In the "Select a Certificate Store for the New Certificate" box choose Web Hosting Certificate Store.
7. Click "OK" to Install the Certificate to the server.
NOTE: There has been a known issue regarding the installation process using IIS 8. The following error has
been received, "Failed to remove the certificate." If you receive that error and it is the same server in which the
CSR has been installed, then the certificate is more than likely actually installed. In that instance, just cancel the
dialog box and refresh the list of server certificates by selecting F5. The new certificate should now be on the list,
and that means it did install to the server. However, you might still wish to double check this and make sure the
certificate is in the "Web Hosting Certificate Store." If it is NOT located there, this is the time you may now move it
to that location. If it is not on the list, then you will have to reissue your certificate with a NEW CSR. Once you
have created a NEW CSR then you may click on the re-key button for the certificate.
8. After the SSL certificate has been successfully installed to the server, this is the time which you will
need to assign that certificate to the website using IIS.
9. Next, from the Internet Information Services (IIS) Manager window, click on the Connections menu and select the
server name where the certificate was installed.
10. Click on "Sites" and then select the option that states, "select the site to be secured with SSL."
11. Next, on the right of the screen will be a menu titled, "Actions" under that menu click on the selection "Bindings."
After you have selected "Bindings" a new window will open titled, "Site Bindings."
12. When the window titled, "Site Bindings" has been opened, click on "Add" which is located to the right of the screen.
13. After selecting the "Add" option, under "Type" select https. Under IP Address, you must select the IP address of the
specific site in which you are using or select "All Unassigned." The port blank box, in which the traffic will be secured
by SSL is 443 in most cases. The SSL Certificate blank should already indicate that the certificate has been installed
during Step Seven.
14. After filling in the blanks located in Step 13, select "OK"
15. The SSL Certificate has not been completely installed and the website has been programmed to accept Secure Connections.
16. Repeat the steps for creating the CSR for the second or greater sites.
17. Install the Certificate file (continue through step 12).
18. In the box titled, "Type" select https. In the box titled, IP Address, make sure that you use the IP address of
the site or select "All Unassigned." In the box titled, "Port" in which the traffic will be secured by the SSL choose 443.
In the box titled, "Host Name" enter the host name that you are securing and check the box that states "Require Server Name
Indication." This step is required for all additional sites OTHER than the Primary Site. The "SSL Certificate" box is
where you should enter the certificate that was installed in Step 7 (For the additional certificate).
19. Select "OK"
20. The SECOND SSL Certificate has now been successfully installed, and the website has been programmed to
"Accept Secure Connections."
21. Repeat steps 16-19 if you need to set up any additional websites.
Generating a SSL Certificate in Microsoft IIS 8
Back To Guides