Install an SSL Certificate on Microsoft IIS 8
After you create a CSR, get an SSL Certificate, and validation and processing are done, you will be ready to install it. We will send your SSL Certificate in an attached text file.
Installing an SSL Certificate on an IIS 8 Server
- You will need the ZIP file that holds your SSL Certificate. Open it. Find the file named my_domain_name.cer. Save it to the desktop of the IIS 8 server you are working with.
- Open the IIS Manager by navigating through the Start screen to the Control Panel, selecting System and Security, then, in the Administrative Tools window, double-clicking the Internet Information Services Manager.
- Navigate to the Connections panel, then select the server name. Find the Server Certificates in the central menu and then double-click it.
- Find the Actions menu. Then you need to click on Complete Certificate Request. You will be taken to the Complete Certificate Request wizard.
- Fill in the required field on the next screen and click OK. The required inputs are listed below.
This is what you need to enter in the fields:
File name Browse your computer for your_domain_name.cer Friendly name This is the name you'll use to identify the server in the future. Certificate store Personal
- After you have installed the SSL Certificate on your computer, you will need to connect it to the right website. For this you'll need to use IIS.
- Find the Connections menu. It is located in the main Manager window, there you will need to select the name of the server where you installed your SSL Certificate. Go to Sites and select the site using which you want to make TLS connections with.
- Find the Actions menu. Select Bindings.
- Go to Site Bindings. Click Add.
- Next, fill in the required fields and hit OK. Below is the necessary input for those fields.
Type https IP address The IP address of the site you want to secure, or All Unassigned. Port 443 Host name Optional Require Server Name Indication Not required if it is on the primary site. SSL Certificate Give the identification for the certificate that you just installed (the Friendly name).
- Your website will now be able to make secure TLS connections over https.
Installing an SSL Certificate on a Microsoft Iis 8 Server – Multiple Certificates Using SNI
If you want to install multiple SSL Certificates on your IIS Server, here is how to do it:
- You will need the ZIP file that holds your SSL Certificate. Open it. Find the file named my_domain_name.cer. Save it to the desktop of the IIS 8 server you are working with.
- Open the IIS Manager by navigating through the Start screen to the Control Panel, selecting System and Security, then, in the Administrative Tools window, double-clicking the Internet Information Services Manager.
- Navigate to the Connections panel, then select the server name. Find the Server Certificates in the central menu and then double-click it.
- Find the Actions menu (on the right). Click on Complete Certificate Request. You will be taken to the Complete Certificate Request wizard.
- Fill in the required field on the next screen and click OK. The required inputs are listed below.
This is what you need to put into the fields:
File name Browse for and find your_domain_name.cer Friendly name This is the name you'll use to identify the server in the future. Certificate store Web Hosting NOTE: There is an issue in IIS 8 which causes it to return this error: Failed to remove the certificate. Most of the time, if this server is where you generated your CSR, then it's installed. Cancel the dialog box you see and hit F5. Often you'll see your new certificate already in the list - if you do, then it's installed. If it's not there, you will need a new CSR. After that, you'll need to re-issue your certificate. After you have made your new CSR, re-key the SSL Certificate and upload it again.
- After installing the SSL Certificate, you will need to connect it to the right website. For this you'll need to use IIS.
- Go to the Connections menu, then select the server where you just installed the certificate. Navigate to Sites and choose the site that you want to make TLS connections with.
- Find the Actions menu. Select Bindings.
- Go to Site Bindings. Click Add.
- Next, fill in the required fields and hit OK. Below is the necessary input for those fields.
Type https IP address The IP address of the site you want to secure, or All Unassigned. Port 443 Host name Optional Require Server Name Indication This is not necessary if it is the primary site. SSL Certificate Identify the certificate that you just installed (Friendly name).
- The site you selected will now be able to make secure TLS connections over https. If you need to install an SSL Certificate on another site, repeat the previous steps up to Step 10.
- Fill in the required fields on the Add Site Binding screen. Below is a description of the inputs that you'll need to use.
Type https IP address The IP address of the site you want to secure or All Unassigned Port 443 Host name Identify the certificate that you just installed. Require Server Name Indication A necessary step for all additional sites. SSL Certificate Identify the certificate that you just installed (Friendly name).
- Click OK.
Go through steps 11-12 again to set up any other additional sites.
Congratulations! You're done. All your sites should now be able to make secure connections using https.