Download and copy your certificate files to your server
Download your SSL certificate and support files by clicking on the download link in your fulfillment email or from your GeoCerts SSL Manager account. Download the PKCS#7 formatted version of your certificate.
- Rename the file your_domain_com.p7b to your_domain_com.cer
Install the PKCS#7 SSL Server Certificate File
- Open the Internet Information Services (IIS) Manager. From the Start screen, click or search for Internet Information Services (IIS) Manager and open it.
- IIn the IIS Manager, select the server node on the top left under Connections.
- Click on the server name.
- From the center menu, double-click the Server Certificates button in the IIS section (it is in the middle of the menu).
- From the Actions pane on the top right, select Complete Certificate Request.
- Browse to your_domain_name.cer file that was downloaded. You will then be required to enter a friendly name. The friendly name is not part of the certificate itself, but is used by the server administrator to easily distinguish the certificate. Choose to place the new certificate in the Personal certificate store.
- Click OK to install the certificate.
- NOTE!! There is a known issue in IIS 8 giving the following error: Failed to remove the certificate If this is the same server that you generated the CSR on then, in most cases, the certificate is actually installed. Simply cancel the dialog and press "F5" to refresh the list of server certificates. If the new certificate is now in the list, then it did install to the server. If it is not in the list, you will need to reissue your certificate using a new CSR.
- Once the SSL Certificate has been successfully installed to the server, you will need to assign that certificate to the appropriate website using IIS.
- From the Connections menu in the main Internet Information Services (IIS) Manager window, select the name of the server to which the certificate was installed.
- Under Sites select the site to be secured with SSL.
- From the Actions menu (on the right), click on Bindings... This will open the Site Bindings window.
- In the Site Bindings window, click Add... This will open the Add Site Binding window.
- Under Type choose https. The IP address should be the IP address of the site or All Unassigned, and the port over which traffic will be secured by SSL is usually 443. The SSL Certificate field should specify the certificate that was installed in step 7. If you currently have the site secured you will see the HTTPS type listed on the Site Bindings window. In this case you will select the type HTTPS and click the Edit... button.
- In either the Add Site Binding or Edit Site Binding window you will select the new certificate in the drop down box listing SSL Certificates. If you are adding a new binding the you will also choose the Type: HTTPS, the IP address: All Unassigned and the Port:443.
- You will click OK then Close the Site Bindings Window.
- If your certificate contains multiple Site Names (SANS), then you will need complete the Bindings Section again for each site.
To verify if your certificate is installed correctly, use our Certificate Installation Checker.
Test your SSL certificate by using a browser to connect to your server. Use the https protocol directive. For example, if your SSL was issued to secure.mysite.com, enter
https://secure.mysite.com into your browser.
Your browser's padlock icon will be displayed in the locked position if your certificate is installed correctly and the server is properly configured for SSL.
For IIS SSL troubleshooting, Microsoft has designed a tool - SSL Diagnostics - to aid in quickly identifying configuration problems in the IIS metabase, certificates, or certificate stores.
Disclaimer: GeoCerts has made efforts to ensure the accuracy and completeness of the information in this document. However, GeoCerts makes no warranties of any kind (whether express, implied or statutory) with respect to the information contained herein. GeoCerts assumes no liability to any party for any loss or damage (whether direct or indirect) caused by any errors, omissions, or statements of any kind contained in this document. Further, GeoCerts assumes no liability arising from the application or use of the product or service described herein and specifically disclaims any representation that the products or services described herein do not infringe upon any existing or future intellectual property rights. Nothing herein grants the reader any license to make, use, or sell equipment or products constructed in accordance with this document. Finally, all rights and privileges related to any intellectual property right described herein are vested in the patent, trademark, or service mark owner, and no other person may exercise such rights without express permission, authority, or license secured from the patent, trademark, or service mark owner. GeoCerts reserves the right to make changes to any information herein without further notice.