sslsd-logo

Microsoft Server 2016 – IIS 10 & 10.5 – SSL Installation

serverLike the majority of server systems you will install your SSL certificate on the same server where your Certificate Signing Request (CSR) was created.

This is because your private key will always be left on the server system where the CSR was originally created. With Microsoft like Microsoft Server 2016 – IIS 10 & 10.5 the private key is hidden away and will only appear once the CSR request has been completed.

Your SSL certificate will not work without this private key file. We will assume that this is the original system.

To Install your SSL certificate on Windows Server 2012 – IIS 8 & 8.5 perform the following.

Step 1: Picking up your SSL Certificate:

  1. If you had the option of server type during enrollment and selected IIS you will receive a pkcs#7/.p7b version of your certificate within the email. Alternately you can access your Certificate User Portal by the supplied link in the email to pick up the pkcs#7 version of your certificate.
  2. Copy the SSL certificate and make sure to copy the —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—– header and footer Ensure there are no white spaces, extra line breaks or additional characters. Use a plain text editor such as Notepad, paste the content of the certificate and save it with extension .p7b (When performing this on a Windows system the Icon of the file should change into a certificate icon)

Step 2: Installing your SSL certificate:

  1. Go to Start > Administrative Tools > Internet Information Services (IIS) Manager.
  2. From the left menu, Click the server name.
  3. In the middle pane, under Security, double-click Server Certificates.
    IIS 8
  4. From the right Actions pane, select Complete Certificate Request.
    IIS 8 binding
  5. Click on the Browse button, navigate and select the location of your new certificate file. (change the file type you are searching for to all .p7b as the default type may be .cer)
  6. Specify a friendly name for quick identification of your new certificate.
  7. In the Select a certificate store.. make sure that Personal is selected from the drop down.
    IIS 8 binding
    Note: You may receive an error when the system is performing the install. This is typically with a glitch with the IIS 7 to IIS 8 series.

    1. Click Ok to acknowledge the error message, and Cancel out of the Complete Certificate Request Wizard.
    2. Hit F5 on your keyboard to refresh the IIS console. Your new certificate should appear in the Middle pane under Server Certificates. It might be missing a friendly name. If you see the new certificate in this pane it means that installation was successful.
      Note: If your certificate still does not appears then either the CSR request was never created on this system, or your private key was damaged. You will have to generate a new CSR request and perform a reissue of the certificate.

Step 3: Assign and Bind the SSL certificate to your web site:

  1. Browse to your server name > Sites > Your SSL-based site.
  2. In the Actions pane, click Bindings.
    IIS 8 binding
  3. In the Site Bindings window. If there is no existing https binding, choose Add and change Type from HTTP to HTTPS.
    Note: If there is already a https binding, select it and click Edit.IIS 8 Binding
  4. From the SSL Certificate drop down, Select the Friendly Name for the SSL certificate that will be used for this site.
    IIS 8 Binding
  5. Click Ok.

Your SSL Certificate is now installed, and the website is now configured.

Additional Notes:

If you are unable to use these instructions for your server, Acmetek recommends that you contact either the vendor of your software or an organization that supports it.

Microsoft Support

For more information refer to Microsoft.

Recent Posts

S/MIME for Outlook O365 Windows

Add to Favorites S/MIME Advantages of S/MIME Certificates S/MIME (Secure/Multipurpose Internet Mail Extensions) certificates offer several advantages when it comes to securing email communications. Here

Read More »

Abbreviations

Add to Favorites There are literally thousands of IT abbreviations out there. Many are concerned with the technical aspects of the computer, while others deal

Read More »

SSL Installation on Qmail

Add to Favorites SSL Installation on Qmail Qmail is a secure, reliable, efficient, simple message transfer agent. It is designed for typical Internet-connected UNIX hosts.

Read More »