How to Request & Install the SSL Certificate
To obtain an SSL certificate, you can either create a certificate, then send a request to use that certificate to a Certificate Authority such as VeriSign or obtain a certificate online using your domain name. When using untrusted certificates, the browser will alert the user if that is the case. These certificates are created by the computer and known as self-signed certificates. Use these certificates only when you know a user will trust your server.
Instructions
-
Obtaining and Requesting a Certificate
-
1
Click the "Start" button, the "Administrative Tools" folder, then the "Internet Information Services (IIS) Manager" shortcut.
-
2
Click your server in the tree view in the left-hand pane and double-click the "Server Certificates" icon to expand the list.
-
-
3
Click the "Create Self-Signed Certificate..." link under the "Actions" section.
-
4
Type a name for your new certificate and click the "OK" button to apply the changes.
Create SSL Binding
-
5
Click a website in the tree view and then the "Bindings..." link under the "Actions" section
-
6
Click the "Add" button.
-
7
Select "https" in the "Type:" drop-down list and the certificate you created earlier in the "SSL Certificate" drop-down list, then click the "OK" button.
Verify SSL Binding
-
8
Click the "Browse *:433 (https)" link under the "Browse Web Site" heading, in the "Actions" pane. Internet Explorer launches.
-
9
Click the "Continue to this website (not recommended)" button.
-
10
Close the Internet Explore window.
Configure SSL Settings
-
11
Click the website icon in the tree view. This will take you back to the website's home page.
-
12
Double-click the "SSL Settings" icon in the middle pane.
-
13
Click the "Require SSL" and "Require 128-bit SSL" check boxes, if necessary.
-
14
Click one of the three radio buttons: "Ignore," "Accept" or "Require" under the "Client Certificates" heading.
-
15
Click the "Apply" button to save the changes.
-
1
Tips & Warnings
Internet Explorer will trust a certificate when you add it to the list of Trusted Root Certification Authorities on a local network or in the Group Policy section for a domain.