Adding an SSL certificate to IIS

From Jonsdocswiki

Jump to: navigation, search

IIS is Microsoft's webserver and as a result requires a P12 or PKCS format SSL certificate.

Certificate
You probably need to use the Certificates snap in to the MMC for this...
The context menu for the default website
  1. Open Internet Information Services (IIS) Manager.
  2. Expand options in the left hand pane and right click on the desired website (see image right).
  3. Click properties.
  4. Choose the Directory Security tab.
  5. The options we require are under Secure Communications
    • Server Certificate... will allow an additional certificate to be added.
    • Click View certificate to see the certificate already in use on the website.
    • Edit allows you to specify if SSL is a requirement along with other options (client certificates etc).

Using the Server Cerificate wizard to replace an out of date certificate

This method assumes that the IIS server you're using isn't generating the Certificate Signing Request and that you already have a certificate (perhaps a converted OpenSLL certificate).

  1. Use the certificates MMC to import the new certificate to the computer account's personal store.
  2. Open the IIS Management Console
  3. Drill down to the website in question and right click it, select properties.
  4. On the Directory Secuity tab click Server Certificate
  5. Click next on the wizard welcome screen.
  6. On the next page select Remove the current certificate and click next.
  7. You will see a summary screen, click next.
  8. Click Finish
  9. Re-run the wizard.
  10. Choose Assign an existing certificate and click next
  11. Select the certificate in question and click next
  12. Set the SSL port appropriately (normally 443) and click next
  13. On the certificate summary screen click next
  14. Click finish
  15. Remove any unrequired certificates using the certificates MMC.

See also

Personal tools