In this tutorial we’ll learn step-by-step on How to Configure SSL in IIS
1. IIS 10: Windows Server 2016: How to Generate Your CSR
Using IIS 10 to Create Your CSR
- Locate and launch the Internet Information Services (IIS) Manager from the Windows start menu.
- Locate and click the server name in the Connections menu tree (left pane) of Internet Information Services (IIS) Manager.
3. In the IIS section of the server name Home page (central pane), double-click Server Certificates
4. Select the Create Certificate Request option located in the Actions menu on the Server Certificates page (center pane, right pane).
5. Enter the data listed below on the Distinguished Name Properties page of the Request Certificate process, then click Next:
Common name: Enter the fully qualified domain name (FQDN) (e.g., www.testdomain.com).
Organization: Enter your company’s legally registered name (e.g., YourCompanyName, Inc.).
Organizational unit: Enter Your department name
or is simply left blank.
City/locality: Enter the name of the city in where your business is situated.
State/province: Enter the state/province.
Country: In the drop-down list, select the country.
- Fill out the form below and click Next on the Cryptographic Service Provider Properties page.
Cryptographic service provider: Select Microsoft RSA SChannel Cryptographic Provider by clicking on the drop-down menu.
Bit length: select 2048 from the drop-down list.
- Select the location where you wish to save your CSR by clicking the… box on the File Name page, under Specify a file name for the certificate request.
Note: Keep in mind where you save your csr.txt file and the filename you select. If you simply type in a filename without traveling to a location, C:\Windows\System32 will be where your .CSR is stored.
8. When you are sure, click Finish.
9. Open the file in a text editor (like Notepad). Then, copy the text, in to the —–BEGIN NEW CERTIFICATE REQUEST—– and —–END NEW CERTIFICATE REQUEST—–
10. After you receive your SSL certificate you can install it.
2. IIS 10: How to Install and Configure Your SSL Certificate on Windows Server 2016
You must install your SSL certificate on the Windows 2016 server where the CSR was generated once we have validated it and issued it. The server must then be configured to use it.
How to set up the server to use your SSL certificate and install it
Set up an SSL certificate.
Install SSL Certificate
- Save the SSL certificate (e.g., star_testdomain_com.cer) file on the server where you generated the CSR.
- Locate and launch the Internet Information Services (IIS) Manager from the Windows start menu.
- Locate and click the server name in the Connections menu tree (left pane) of Internet Information Services (IIS) Manager.
4. Double-click Server Certificates in the IIS section of the server name Home page (central pane).
5. Select the Complete Certificate Request option located in the Actions menu on the Server Certificates page (center pane, right pane).
6. On the Specify Certificate Authority Response screen of the Complete Certificate Request process, complete the following and click OK:
File name containing the certificate authority’s response: Select the.cer file by using the browse button to navigate to it. (e.g., star_testdomain_com.cer).
Friendly name: Enter a friendly name for the certificate.
The friendly name is used to identify the certificate; it is not a component of the certificate.
Select a certificate store for the new certificate: In the drop-down list, select Web Hosting.
- After installing your SSL certificate successfully, you must designate the certificate to the relevant website
sign SSL Certificate - Expand the name of the server that the certificate was put on in the Connections menu tree (left pane) of Internet Information Services (IIS) Manager. Next, select the website you wish to secure with the SSL certificate by expanding Sites.
9. Click the Bindings… link under Edit Site in the Actions menu (right pane) on the website’s Home page.
10. Select Add from the Site Bindings window.
11. In the Add Site Bindings window, do the following and then click OK:
Type: Select https from drop-down list.
IP address: Select the IP address of the site or select All Unassigned from drop-down list
Port: Input port 443. Port 443 is the one that SSL secures communication over.
SSL certificate: Select your new SSL certificate from the drop-down list (e.g., testdomain.com).
- The website is now set up to allow secure connections and your SSL certificate is installed.
So, this is the full guide steps of configure SSL in IIS