• Advertisement
Join the IT Notebook

Any - IIS 5+ - Installing/renewing SSL Certificates

Any software title released for Windows. Articles are posted in "Windows Version - Software Title - Subject" format.

Any - IIS 5+ - Installing/renewing SSL Certificates

Postby lmmtux » Fri Aug 24, 2012 4:35 pm

This article should work with any certificate provider to install or renew SSL Certificates in IIS.


Installing/renewing a certificate:

  1. Open IIS Manager.
  2. Navigate to the site to install or renew the certificate for.
  3. Right-click on the site, and go to Properties.
  4. Go to the Directory Security tab.
  5. Click Server Certificate.
  6. Click "Process server certificate request" and save the resulting file to the local C drive.
  7. Use the certificate provider website to create or renew a certificate. When prompted, copy and paste the contents generated in the server certificate request file from above.
  8. Once submitted above, wait while the certificate provider generates the certificate. This can take a while depending on the provider.
  9. Go back in to IIS Manager (to the site / Properties / Directory Security tab, Server Certificate).
  10. Select "Process the pending request".
  11. When prompted, select the .cer (certificate) file that was received from the certificate provider.
  12. Click Finish and verify the website is using the new certificate in your web browser. It should contain the new and correct expiration date.


Export a certificate:

It is highly advised to back up your installed certificates in case of a server crash. Follow these steps:

  1. Open the Certificates MMC (management console). This can be done by opening the "mmc" program and clicking on Add/Remove and locating it in the list and clicking "Add".
  2. Under the Personal tab, locate the original certificate that you wish to back up.
  3. Right-click and select Export. Note: Be sure to NOT select the option to delete the private key, and to select "export the key with the certificate".
  4. Save the exported certificate and key to a .pfx file. Save the .pfx file in a secure location.


Import an exported certificate:

  1. Open the Certificates MMC (management console). This can be done by opening the "mmc" program and clicking on Add/Remove and locating it in the list and clicking "Add".
  2. Under the Personal tab, right-click and select Import.
  3. Follow the import wizard, and select the .pfx file which contains the certificate.
  4. Once the certificate is imported, you can use it in IIS by going back to the Server Certificate area (site / Properties / Directory Security tab, Server Certificate). In the Server Certificate area, select the Import option and select the imported certificate from the certificate store.
lmmtux
 
Posts: 55
Joined: Mon Jul 30, 2012 9:40 pm
Reputation: 0

Return to Microsoft Windows

cron