How to Install and Configure Your SSL Certificate on Windows Server 2016 with IIS 10

  Print

How to Install and Configure Your SSL Certificate on Windows Server 2016 with IIS 10

(Single Certificate) How to install your SSL certificate and configure the server to use it

Install SSL Certificate

  1. On the server where you created the CSR, save the SSL certificate .cer file (e.g., your_domain_com.cer) that the certificate authority sent to you.
  2. In the Windows start menu, type Internet Information Services (IIS) Manager and open it.
  3. In Internet Information Services (IIS) Manager, in the Connections menu tree (left pane), locate and click the server name.

    IIS 10 Install SSL Certificate
  4. On the server name Home page (center pane), in the IIS section, double-click Server Certificates.
  5. On the Server Certificates page (center pane), in the Actions menu (right pane), click the Complete Certificate Request… link.

    IIS 10 Install SSL Certificate
  6. In the Complete Certificate Request wizard, on the Specify Certificate Authority Response page, do the following and then click OK:

    File name containing theClick the box and browse to and select the .cer file
    certificate authority's response:(e.g., your_domain_com.cer) that the certificate authority sent to you.
    Friendly name:Type a friendly name for the certificate.
    The friendly name is not part of the certificate; instead, it is used to identify the certificate.
    We recommend that you add certificate authority's name and the expiration date to the end of your friendly name, for example: yoursite-authority-(expiration date).
    This information helps identify the issuer and expiration date for each certificate. It also helps distinguish multiple certificates with the same domain name.
    Select a certificate storeIn the drop-down list, select Web Hosting.
    for the new certificate:
    IIS 10 Install SSL Certificate
  7. Now that you've successfully installed your SSL certificate, you need to assign the certificate to the appropriate site.
Assign SSL Certificate

  1. In Internet Information Services (IIS) Manager, in the Connections menu tree (left pane), expand the name of the server on which the certificate was installed. Then expand Sites and click the site you want to use the SSL certificate to secure.

    IIS 10 Assign SSL Certificate
  2. On the website Home page, in the Actions menu (right pane), under Edit Site, click the Bindings… link.
  3. In the Site Bindings window, click Add.

    IIS 10 Assign SSL Certificate
  4. In the Add Site Bindings window, do the following and then click OK:

    Type:In the drop-down list, select https.
    IP address:In the drop-down list, select the IP address of the site or select All Unassigned.
    Port:Type port 443. The port over which traffic is secure by SSL is port 443.
    SSL certificate:In the drop-down list, select your new SSL certificate (e.g., yourdomain.com).
    IIS 10 Assign SSL Certificate
  5. Your SSL certificate is now installed, and the website configured to accept secure connections.

    IIS 10 Assign SSL Certificate

(Multiple Certificates) How to install your SSL certificates and configure the server to use them using SN

Install First SSL Certificate

Do this first set of instructions only once, for the first SSL certificate.

  1. On the server where you created the CSR, save the SSL certificate .cer file (e.g., your_domain_com.cer) that the certificate authority sent to you.
  2. In the Windows start menu, type Internet Information Services (IIS) Manager and open it.
  3. In Internet Information Services (IIS) Manager, in the Connections menu tree (left pane), locate and click the server name.

    IIS 10 Install SSL Certificate
  4. On the server name Home page (center pane), in the IIS section, double-click Server Certificates.
  5. On the Server Certificates page (center pane), in the Actions menu (right pane), click the Complete Certificate Request… link.

    IIS 10 Install SSL Certificate
  6. In the Complete Certificate Request wizard, on the Specify Certificate Authority Response page, do the following and then click OK:

    File name containing theClick the box and browse to and select the .cer file
    certificate authority's response:(e.g., your_domain_com.cer) that the certificate authority sent to you.
    Friendly name:Type a friendly name for the certificate.
    The friendly name is not part of the certificate; instead, it is used to identify the certificate.

    We recommend that you add certificate authority's name and the expiration date to the end of your friendly name, for example: yoursite-authority-(expiration date).
    This information helps identify the issuer and expiration date for each certificate. It also helps distinguish multiple certificates with the same domain name.
    Select a certificate storeIn the drop-down list, select Web Hosting.
    for the new certificate:
    IIS 10 Install SSL Certificate
  7. Now that you've successfully installed your SSL certificate, you need to assign the certificate to the appropriate site.
  8. In Internet Information Services (IIS) Manager, in the Connections menu tree (left pane), expand the name of the server on which the certificate was installed. Then expand Sites and click the site you want to use the SSL certificate to secure.

    IIS 10 Assign SSL Certificate
  9. On the website Home page, in the Actions menu (right pane), under Edit Site, click the Bindings… link.
  10. In the Site Bindings window, click Add.

    IIS 10 Assign SSL Certificate
  11. In the Add Site Bindings window, do the following and then click OK:

    Type:In the drop-down list, select https.
    IP address:In the drop-down list, select the IP address of the site or select All Unassigned.
    Port:Type port 443. The port over which traffic is secure by SSL is port 443.
    SSL certificate:In the drop-down list, select your new SSL certificate (e.g., yourdomain.com).
    IIS 10 Assign SSL Certificate
  12. Your first SSL certificate is now installed, and the website configured to accept secure connections.

Install Additional SSL Certificates

To install and assign each additional SSL certificate, repeat the steps below, as needed.

  1. On the server where you created the CSR, save the SSL certificate .cer file (e.g., your_domain_com.cer) that the certificate authority sent to you.
  2. In the Windows start menu, type Internet Information Services (IIS) Manager and open it.
  3. In Internet Information Services (IIS) Manager, in the Connections menu tree (left pane), locate and click the server name.

    IIS 10 Install SSL Certificate
  4. On the server name Home page (center pane), in the IIS section, double-click Server Certificates.
  5. On the Server Certificates page (center pane), in the Actions menu (right pane), click the Complete Certificate Request… link.

    IIS 10 Install SSL Certificate
  6. In the Complete Certificate Request wizard, on the Specify Certificate Authority Response page, do the following and then click OK:

    File name containing theClick the box and browse to and select the .cer file
    certificate authority's response:(e.g., your_domain_com.cer) that the certificate authority sent to you.
    Friendly name:Type a friendly name for the certificate.
    The friendly name is not part of the certificate; instead, it is used to identify the certificate.
    We recommend that you add certificate authority's name and the expiration date to the end of your friendly name, for example: yoursite-authority-(expiration date).
    This information helps identify the issuer and expiration date for each certificate. It also helps distinguish multiple certificates with the same domain name.
    Select a certificate storeIn the drop-down list, select Web Hosting.
    for the new certificate:
    IIS 10 Install SSL Certificate
  7. Now that you've successfully installed your SSL certificate, you need to assign the certificate to the appropriate site.
  8. In Internet Information Services (IIS) Manager, in the Connections menu tree (left pane), expand the name of the server on which the certificate was installed. Then expand Sites and click the site you want to use the SSL certificate to secure.

    IIS 10 Assign SSL Certificate
  9. On the website Home page, in the Actions menu (right pane), under Edit Site, click the Bindings… link.
  10. In the Site Bindings window, click Add.

    IIS 10 Assign SSL Certificate
  11. In the Add Site Bindings window, do the following and then click OK:

    Type:In the drop-down list, select https.
    IP address:In the drop-down list, select the IP address of the site or select All Unassigned.
    Port:Type port 443. The port over which traffic is secure by SSL is port 443.
    Host name:Type the host name that you want to secure.
    Require ServerAfter you enter the host name, check this box.
    Name Indication:This is required for all additional certificates/sites, after you've installed the first certificate and secured the primary site.
    SSL certificate:In the drop-down list, select an additional SSL certificate (e.g., yourdomain2.com).
    IIS 10 Assign SSL Certificate
  12. You have successfully installed another SSL certificate and configured the website to accept secure connections.


Related Articles

Login