To add an SSL certificate to IIS in Windows Server 2008 R2
Its something that I do without actually thinking about, simply get another certification and add it into the host so that the website can load https:// rather than http:// I have used plenty of different SSL providers, however I have discovered that the most dependable and simple to use is www.trustico.co.uk and their customer service and service is outstanding.
That I will attempt to create this as step-by-step as possible so that it’s simple to follow.
Component 1 — Creating the certificate request
- Click on the server name on the left hand side and then double-click on Server Certificates
- On the right-hand-side of this server certificates department, click on Create Certificate Request
- The Request Certificate wizard is shown. The Common Name is the site URL that you’re going to earn SSL. In this example, I am creating a buy ssl certificate uk for one of our strategies.
There are two chief kinds of certification, single and wildcard. A single certificate is for one site (e.g. https://www.google.co.uk), a wildcard certification is for numerous sub-domains in the same domain (e.g. https://maps.google.co.uk AND https://places.google.co.uk… and as numerous other sub-domains as you can think of) without having to purchase individual certificates for each sub-domain.
The single REALLY important part of this is the frequent name.
Click on Next to continue Change the Bit length to 2048 or higher. A note of caution on this — if you change it to some very high bit length it usually means that the quantity (size in kb) of all pages being shipped to and out of your site is significantly increased, but is more protected.
You should not opt for any setting lesser than 2048. As of October 2013, all certificates are revoked and 2048 is the benchmark. Next we’re picking somewhere to put the certificate request (only a plain text document ). I normally place this on the Windows Desktop.
Click the… button to choose the place
Installing the certificate on the server You should have an email from TrustICO (in this example it took 12 minutes for me) with the subject RapidSSL Fulfillment E-Mail [certification title ]
Scroll down the email till you reach the —BEGIN CERTIFICATE—- part. I have (obviously) hashed out my certification for safety reasons.
Choose the whole certificate (like the begin and end lines) and Copy it to the clipboard (Ctrl + C or Cmd+C).
Return to the host (or if You’re already on it, get into the desktop)
- On the host, Open Notepad
- Paste in the certificate Click on File, Save As and choose the Desktop again (or if like me you have a lot of certificates, create a folder to place them in)
Give the certificate a name you’ll remember (I always place the years in so that I can distinguish between different years worth of certificates).
IMPORTANT — there MUST be the expansion .cer at the conclusion.
IMPORTANT — change the”Save As Type” to All Files (if you forget, it will include a .txt in the end of the document name, which you then have to remove to make it function )
Click Save You should now see a certificate on your desktop computer (or the folder where you saved it) Open IIS and go to the Server Certificates item Click on Complete Certificate Request on the right hand side
- Select Your certification
IMPORTANT — Favorable Name — should you ordered a wildcard certificate it’s REALLY IMPORTANT that you simply put the frequent name of the certification as the friendly title (e.g. *.goodmorningpulse. co.uk)
In this case, as it was a single certificate, not a wildcard its good to give it a name so you know which is which on the list.
Screen Shot 2013-09-12 in 10.15.15
Click on OK
IIS Parses the petition, and if successful (which it always needs to be in case you’ve established the certificate correctly) then it will add the certificate to your list.
Part 4 — Binding the certificate to the website
So you’ve got your certificate on your server, and you now need to tell your website to use it.
- In IIS, extend the Sites item on the left hand side
- Right-click on the site you wish to use the SSL certificate for, and click on Edit Bindings
Screen Shot 2019-09-12 at 10.24.35
- The site bindings are displayed. Click on Add
- Change the type and Choose your new certificate
Screen Shot 2019-09-12 in 10.25.48
Click OK and then Click on Close
- The site will enable https connections! Its that simple!