Toll Free: 800-892-7095

Install SSL Certificate IIS 7

Step 1: Install the SSL Server Certificate

Your SSL server certificate will be sent to you by email. The email message includes the server certificate that you purchased in the body of the email message. It will be labled "Server Certificate (public key)". It is also downloadable from your SSL Manager account (recommended). Copy the certificate from the body of the email and paste it into a simple text editor, such as Vi or Notepad (do not use MS Word).
Save this as public.cer on your desktop or other location where you can find it later.
Open the Internet Information Services (IIS) Manager. From the Start button select Programs > Administrative Tools > Internet Information Services Manager.
In the IIS Manager, select the server node on the top left under Connections
In the Features pane (the middle pane), double-click the Server Certificates option located under the IIS or Security heading (depending on your current group-by view).
From the Actions pane on the top right, select Complete Certificate Request.
On the Complete Certificate Request page browse to the SSL certificate file public.cer that you saved from step 2.
Next, type a friendly name for the certificate in the Friendly name box, and then click OK. Something like www.mydomain.com will do.
Your SSL server certificate is now installed on your server and you should see it listed in the Server Certificates view. Now you will need to configure your web site to use the certificate.

Step 2: Edit Server Bindings

If you have only one web site it will mostly likely be listed in IIS 7 as the Default web site. Select and right-click on the Default web site and select Edit Bindings.

If you only see 'http' under the Type column of the Web Site Bindings dialog box click the Add button and select 'https' from the drop down box under Type.

Then select the name of the SSL certificate from the SSL certificate list that you just installed and click Ok.

Then click Close to complete the Edit Bindings wizard.

Troubleshooting/Testing

New To verify if your certificate is installed correctly, use the GeoTrust Certificate Installation Checker.

Test your SSL certificate by using a browser to connect to your server. Use the https protocol directive. For example, if your SSL was issued to secure.mysite.com, enter https://secure.mysite.com into your browser.

Your browser's padlock icon Browser padlock will be displayed in the locked position if your certificate is installed correctly and the server is properly configured for SSL.

For IIS SSL troubleshooting, Microsoft has designed a tool - SSL Diagnostics - to aid in quickly identifying configuration problems in the IIS metabase, certificates, or certificate stores.

When attempting to install the certificate IIS returns this message:

Error: The pending certificate request for this response file was not found. This request may be cancelled. You cannot install selected response certificate using this Wizard.

The most common reason for this is that the certificate in the body of the email is corrupted. Assuming you haven't deleted the pending request, an easy fix is to download the certificate directly from your SSL Manager account and try to install again. If that doesn't work, or you have already deleted the pending request, you will need to generate a new CSR and have your certificate reissued.

Disclaimer: GeoCerts has made efforts to ensure the accuracy and completeness of the information in this document. However, GeoCerts makes no warranties of any kind (whether express, implied or statutory) with respect to the information contained herein. GeoCerts assumes no liability to any party for any loss or damage (whether direct or indirect) caused by any errors, omissions, or statements of any kind contained in this document. Further, GeoCerts assumes no liability arising from the application or use of the product or service described herein and specifically disclaims any representation that the products or services described herein do not infringe upon any existing or future intellectual property rights. Nothing herein grants the reader any license to make, use, or sell equipment or products constructed in accordance with this document. Finally, all rights and privileges related to any intellectual property right described herein are vested in the patent, trademark, or service mark owner, and no other person may exercise such rights without express permission, authority, or license secured from the patent, trademark, or service mark owner. GeoCerts reserves the right to make changes to any information herein without further notice.

Our Customers

(see more)