StartCom, the Start of eCommerce.

How to add SSL Certificates in IIS7

(Many thanks to Yehuda Katz for this instructions)

The process for adding SSL certificates in IIS7 differs from IIS6 most in the interface. The overall steps required are similar.

This guide was made using Windows Vista Ultimate with IIS7 and FTP7.

This guide does not include instructions for adding the root and intermediary certificates.

  1. Open the IIS7 Manager

    1.jpg

  2. Select your server and choose Server Certificates.

    2.jpg

  3. In the Actions column, choose Create Certificate Request…

    3.jpg

  4. Fill in the requested information for your certificate. Whatever you write here will be the DN of your certificate.
    The common name should be the servers external FQDN (Fully Qualified Domain Name), which means the address which users type when they access the website from the Internet. The common name is typically www.domain.com NOT https://www.domain.com, mail.domain.com/exchange or your public IP address.

    4.jpg

  5. Choose key length (2048 or higher is recommended)

    5.jpg

  6. Choose a place to save your key request. You will need it soon.

    6.jpg

  7. Open the CSR that you created and submit it to your certificate provider.

    7.jpg

  8. select the 3_domain.crt certificate is from the iis server.zip. Import it by choosing Complete Certificate Request… from the Actions menu.

    8.jpg

  9. Open an empty MMC on the OWA server, to do so click Start > Run and type MMC then click Enter. Then click File > Add/Remove Snap-in in the menu, now click Add and select Certificates (Figure 1).

    9.jpg

    Choose Computer Account then Local Computer then click Next > Close and Ok.

    10.jpg

  10. Import 2_Intermediate.crt certificate is from the iis server.zip into Intermediate certificate authority.

    11.jpg

  11. Your certificate should now be listed in the Server Certificates List.

    12.jpg

  12. To add SSL support to your site, right click the site and choose Edit Bindings…

    13.jpg

  13. Add a binding of type https and choose the certificate that you would like to use from the dropdown.

    14.jpg

  1. If you would like to require SSL, go to the site settings and choose SSL Settings

    14a.jpg

  2. And choose Require SSL

    14b.jpg

  1. To add SSL to an FTP site (available only if you have FTP7), open the FTP site and choose FTP SSL Settings

    ftp1.jpg

  2. Choose Allow or Require or make your own combination.

    ftp2.jpg

Top