IIS - Certificate Installation

This manual applies to IIS 7 and 8. A different manual is available for IIS 5 and 6, and Exchange 2000 and 2003.

Immediately after being issued, your SSL certificate will be sent to you by email. It is also possible to download the certificate from the Control Panel. The file containing the certificate will have the same name as the domain name it is meant for (for example: www_sslcertificaten_nl.crt).

Certificate Installation

Save the certificate files that were sent, so that they are accessible from the server.

  1. Click the Start menu → Administrative ToolsIIS Manager.
  2. Choose the server name and then click Features (middle field).
  3. Double-click Server Certificates under Security.
  4. On the right-hand side click Complete Certificate Request under Actions. A new window will open. IIS 7 - Installatie SSL 1.png
  5. Navigate to the saved certificate; the standard file name follows this structure your_domain_com.crt. Note: If you have purchased a certificate for which a root and intermediate certificate must be installed, it is practical to use the .p7b-file, as this installs both the root and intermediate certificates.
  6. Enter a practical name for the Friendly name - such as the domain name - and click OK. The certificate is now installed and ready to be bound to the website.

Bind certificate to the website

The certificate can now be activated. To do this the website first has to be bound to the HTTPS protocol, after which the certificate can be assigned to the website. To bind the certificate to the website:

By using the Graphical User Interface:

  1. Click the Start menu → Administrative ToolsIIS Manager.
  2. In the IIS Manager use the left menu to browse to the server that hosts the website that must be secured, go to Sites and select the website which must be secured using the new certificate. IIS 7 - Installatie SSL 2.png
  3. In the Action panel to the right, click Bindings.
  4. In the Site Bindings window click Add... to open the Add Site Binding window..
  5. Enter https as Type, the IP-address of the server through which the website is accessed, and the port to be used (the default is 443). Click the Browse button, select the just installed certificate and click OK. IIS 7 - Installatie SSL 3.png IIS 7 - Installatie SSL 4.png

By using the Command Prompt:

  1. Open the command prompt and use the following command: appcmd set site /site.name: string /+bindings. [protocol=' string ',bindingInformation=' string ']
  2. Variable site.name should be replaced with the name of the site to which you wish to add a binding. Variable protocol string represents the protocol you intend to use, and bindingInformation is a combination of the IP-address and the host header.
  3. To give an example: the following command should be used to create a HTTPS binding for a site called Test for all IP-addresses on port 443 without a host header: appcmd set site /site.name: Test /+bindings.[protocol='https',bindingInformation='*:443:']

All necessary steps to install your web server certificate have now been completed. Please make sure to adequately secure your certificate files, and to store a backup of your private key and web server certificate in a safe location. You should also install the root and intermediate certificates. Check whether the certificate is correctly installed with the SSLCheck and ensure an optimal configuration with these tips and settings.

Please do not hesitate to contact us if you encounter problems or error messages.

SSLCheck

Our SSLCheck will examine your website's root and intermediate certificates for correctness and report any potential issues