Installing an SSL Certificate in Microsoft IIS7
After we approve your certificate request, you can download your SSL and intermediate certificate files in the SSL application. Both must be installed on your Web server. For more information, see Downloading Your SSL Certificate.
You can also download the intermediate certificate from the repository.
To Install Intermediate Certificates
- From the Start menu, select Run..., type mmc, and then click OK.
- In the Microsoft Management Console (MMC), from the File menu, select Add/Remove Snap-in.
- In the Add or Remove Snap-ins window, click Certificates, and then click Add.
- Select Computer Account, and then click Next.
- Select Local Computer, and then click Finish.
- Close the Add Standalone Snap-in window, and, in the Add/Remove Snap-in window, click OK.
- In the MMC window, expand the Certificates folder to view the Intermediate Certification Authorities folder.
- Right-click Intermediate Certification Authorities, select All Tasks, and then select Import.
- In the Certificate Import Wizard, click Next.
- Click Browse to find the intermediate certificate file. Change the file extension filter to PKCS #7 Certificates (*.spc;*.p7b), select the *_iis_intermediates.p7b file, and then click Open.
NOTE: Do not install your Leaf Certificate in this area. Doing so causes your certificate to disappear from the list and you must reinstall to correct the problem.
- Click Next.
- Select Place all certificates in the following store.
- Click Browse, select Intermediate Certification Authorities, and then click Next.
- Click Finish.
NOTE: If the Starfield Class 2 Certification Authority root certificate is currently installed on your machine, you need to disable it from the Trusted Root Certification Authorities folder.
- Expand the Trusted Root Certification Authorities folder.
- Double-click the Certificates folder.
- Right-click Starfield Class 2 Certification Authority, and then select Properties.
- Select Disable all purposes for this certificate, and then click OK.
NOTE: Do not disable the Secure Certification Authority certificate located in the Intermediate Certification Authorities folder. Doing so breaks the server and causes it to stop sending the correct certificate chain to the browser.
To Install SSL Certificates
- From the Start menu, select Control Panel, and then select Administrative Tools.
- Select Internet Information Services Manager, and click Server Name.
- In the Security section, double-click Server Certificates.
- From the Actions menu, select Complete Certificate Request...
- In the Complete Certificate Request Wizard, enter the location for the certificate file. The file extension might be .txt or .crt instead of .cer (search for all files).
- Enter a friendly name for the certificate file, and then click OK.
- After the certificate installs, assign it to the correct website in IIS. In the Internet Information Services Manager window, from the Connections menu, select the name of the server where you installed the certificate.
- For Websites, select the Website to be secured with the SSL certificate.
- From the Actions menu, select Bindings...
- In the Website Bindings window, click Add...
- In the Add Website Binding window:
- From the Type drop-down menu, select https.
- From the IP address drop-down menu, select All Unassigned or the IP address of the Website.
- For Port, type 443.
- From the SSL Certificate drop-down menu, select the SSL certificate you just installed, and then click OK.
