Generate CSR 

  1. Start screen
  2. Open IIS Manager
  3. Click on server name
  4. From the center menu, double-click the “Server Certificates” button in the “IIS” section (it is in the middle of the menu).
  5. From the “Actions” menu (on the right), click on “Create Certificate Request…” This will open the Create Certificate Request wizard. Provide the details
    1. Common Name — The fully-qualified domain name (FQDN) — or URL — for which you plan to use your certificate
    2. Organization — The name in which your business is legally registered
    3. Organizational Unit — Use this field to differentiate between divisions within an organization
    4. City/Locality
    5. State/Province
    6. Country — The two-letter International Organization country code
  6. For Cryptographic service provider, select Microsoft RSA SChannel Cryptographic Provider.
  7. For Bit length, select 2048 or higher, and then click Next.
  8. Click , enter the location and file name for your CSR, and then click Finish.

Now share this csr with your ssl provider and purchase SSL certificate.

Install SSL 

  1. Start screen
  2. Open IIS Manager
  3. Click on server name
  4. From the center menu, double-click the “Server Certificates” button in the “IIS” section (it is in the middle of the menu).
  5. From the “Actions” menu (on the right), click on “Complete Certificate Request…” This will open the Complete Certificate Request wizard
  6. Browse to your_domain_name.cer file that was provided to you by ssl Providers. You will then be required to enter a friendly name(yourdomain.tld). The friendly name is not part of the certificate itself, but is used by the server administrator to easily distinguish the certificate. Choose to place the new certificate in the Personal certificate store.
  7. Clicking “OK” will install the certificate to the server.
  8. Once the SSL Certificate has been successfully installed to the server, you will need to assign that certificate to the appropriate website using IIS
  9. Under “Sites,” select the site to be secured with SSL.
  10. From the “Actions” menu (on the right), click on “Bindings…” This will open the “Site Bindings” window.
  11. In the “Site Bindings” window, click “Add…” This will open the “Add Site Binding” window.
  12. Under “Type” choose https. The IP address should be the IP address of the site or All Unassigned, and the port over which traffic will be secured by SSL is usually 443. The “SSL Certificate” field should specify the certificate that was installed in step 6
  13. Click “OK.”
  14. Your SSL certificate is now installed, and the website configured to accept secure connections.

You can now verify ssl from https://www.sslshopper.com/ssl-checker.html?hostname=google.com

 

Leave a Reply