Install SSL Certificates on Windows Server 2008 and 2012


Generate a Certificate Request Signing (CSR)

  1. Open Internet Information Services (IIS) Manager.
  2. Select the server name, and then double-click Server Certificate.
  3. Under Actions, click Create Certificate Request.
  4. On the unique Name Properties page of the Certificate Request Wizard, fill in all the fields for your certificate and then click Next.
  5. On the next page of the wizard, select an encryption provider (default is usually acceptable) and the bit length of the encryption key (the recommended minimum is 2048 bits). Then click Next.
  6. On the file name, specify the location where you want to save the certificate request file, and then click Finish.

Install the certificate

  1. When you get the certificate from your SSL certificate you have ordered, log in to the server and in the IIS manager, select the server and double-click on Server certificate.
  2. Under Actions, click Complete Certificate Request.
  3. In the wizard, select the location of the certificate file, which is in the same location as you selected when creating the CSR in the previous section.
  4. (Windows Server 2012 only) Name the file and select your store.
  5. Click OK.

Set up the bindings

  1. In the IIS Manager, right-click on your site and select Edit Bindings.
  2. In the Site Bindings window, click Add.
  3. In the Add Website Binding dialog box, perform the following steps:
    1. Set the value of type to https.
    2. (Windows Server 2012) Enter the hostname, if required.
    3. From the SSL certificate list, select your certificate.
    4. Click OK.
  4. After the binding is set, the Binding Web site displays the HTTPS binding window.

Import an SSL certificate

  1. In the IIS Manager, double-click Server Certificates.
  2. Under Actions, click Import.
  3. Select the location of the certificate file, enter the password (if you set one), and select the certificate archive (Windows Server 2012 only).
  4. Click OK.