Below you will find instructions outlining how to install an SSL certificate on Microsoft IIS (Internet Information Services).
Important: CSR
For IIS, you first need to request a certificate and generate a certificate code (CSR) via IIS and then use that code to issue a certificate with ZeroSSL.
Before You Start
Please make sure you have downloaded your certificate files. Still haven't downloaded your certificate? To get instructions on how to download your certificate (.zip), you can click here.
After downloading your certificate, you should have a ZIP containing the following certificate files:
- certificate.crt
- ca_bundle.crt
- private.key
Please note you will need a different format for your certificate since you are installing the certificate on Windows Server. Please follow these steps 👉 Certificate Format
Depending on the version of your Windows Sever, you can follow along one of the following installation instructions:
-
Add a Certificate Snap-in to the Microsoft Management Console (MMC)
1. Click on your Start Menu, then click Run.
2. In the prompt, type mmc and click OK.
3. Click File, then click Add/Remove Snap-in.
4. On the new window, click the Add button.
5. On the new window, select Certificates and click Add.
6. Select Computer account for the snap-in and click Next.
7. Click Local computer and click Finish.
8. Click Close on the Add Standalone Snap-in window.
9. Click OK on the Add/Remove Snap-in window. -
Import the Intermediate SSL Certificate
1. In the MCC Console, click ▸ to expand Certificates (Local Computer).
2. Right click on the Intermediate Certification Authorities folder, hover over All Tasks and click Import.
3. On the new window, click Next.
4. Click Browse, find your previously uploaded intermediate certificate file and click Open.
5. Click Next, verify that the certificate information is proper and click Finish.
6. Close the the import was successful notification. -
Install your SSL certificate
1. Click on your Start Menu, then click Run.
2. In the prompt, type inetmgr and click OK to launch the Internet Information Services (IIS) Manager.
3. Under the Connections panel on the left, click on your Server Name.
4. In the main panel under the IIS section, double click on Server Certificates.
5. Under the Actions panel on the right, click Complete Certificate Request.
6. On the new window, click ... to browse, find your previously uploaded primary certificate file and click Open.
7. Add a Friendly name to easily identify this certificate in the future.
8. In the certificate store option, select Personal and click OK. -
Bind the SSL certificate
1. Under the Connections panel on the left, click ▸ to expand the Sites folder.
2. Click the Site Name that you plan to install the SSL certificate onto.
3. Under the Actions panel on the right, find the Edit Site section and click Bindings.
4. On the new window, click Add and fill out the following information:- Type: https
- IP Address: Select your site’s IP Address or All Unassigned.
- Port: 443
- Host Name: leave this empty.
- SSL Certificate: select your recently installed certificate.
-
Restart IIS
Under the Actions panel on the right, find the Manage Website section and click Restart.
-
Access Server in IIS
Launch IIS Manager and click the server name in the Connections menu on the left.
-
Generating CSR - Open Server Certificates Manager
On the Home page for the server, locate the IIS section in the center window and double-click Server Certificates. The Server Certificates control panel will open in the center window. Here click on the “Create Certificate Request,” fill out the prompted data and finish the steps.
-
Open Complete Certificate Request Wizard
On the Actions menu on the right, click Complete Certificate Request… The Complete Certificate Request wizard will open in a new window.
-
Specify Certificate Authority Response
Click the … button to locate your certificate on your PC and add it to IIS (you will not be able to locate it if you don't change the format beforehand). The Friendly Name should be something that helps you easily identify the certificate. Finally, select Web Hosting as the certificate store and click OK to import your certificate.
-
Set Certificate Bindings
Return to the server home page in IIS. In the left-side Connections menu, expand Sites and click on the site that needs the SSL installed. On the Home page for the website, in the right-side Actions menu, locate Edit Site and click Bindings… The Site Bindings window will open.
If you are installing an SSL certificate for the first time, click Add to create a new binding. If you are replacing an old certificate, click the existing binding and then click Edit. In the Add Site Bindings window, select the following:- Type: https
- IP Address: Select your site’s IP Address or All Unassigned.
- Port: 443
- Host Name: Not required for single name certificate installation.
If you are installing more than one certificate or installing the certificate on more than one website, enter the hostname (domain) that you want to secure and check the box to Require Server Name Indication.
SSL Certificate: Select your site’s certificate from the drop-down menu.
When all settings are configured, click OK. -
SSL Settings
Go back and access the SSL Settings. Click on the Require SSL checkbox and in the right-side Actions menu, click Apply.
Congratulations
Your site has now been secured using your new SSL certificate!
Do you have Feedback to the installation of your SSL certificate?
Tips
- It is necessary to combine the certificate with the private key and generate a certificate with the .pfx extension 👉 Certificate Format
- If your certificate disappears as soon as you click on another section, the steps taken to issue a certificate were probably wrong. Please note you first need to request a certificate and generate a certificate code (CSR) via IIS and then use that code to issue a certificate with ZeroSSL.