How to generate CSR key and install SSL certificate on IIS 8?

SSL (Secure Sockets Layer) is an encryption technology, which creates an encrypted connection between a web server and user's browser. SSL allows private information to be encrypted and transmitted from user's web browser to web server and visa-versa which eliminate the problems of eavesdropping, data tampering, or message forgery. The website with an SSL certificate will be accessible by https:// protocol instead of http://. Moreover, you can also see a padlock icon in web browser, when you access website with an SSL certificate. When you install SSL certificate in your website, your user's private information like contact, credit/debit card details etc are transmitted securely.

Following are the steps for generating the CSR key and installing SSL Certificate in Windows Server 2012 IIS 8.

Steps to Generate a CSR Key for an SSL Certificate:

  1. Open IIS manager.

  2. Click on Computer name and select Server Certificates option.

    Select Server Certificates Option

  3. Click on Create Certificate Request... option from the Action Pane.

    Create Certificate Request

  4. You will see a Request Certificate wizard, fill all the details and click on Next button.

    • Common Name: Your domain name, (e.g., www.domain.com)
    • Organization: Name of your company
    • Organizational unit: Name of your department
    • City/locality: The city in which your organization is located
    • State/province: The state in which your organization is located
    • Country/region: Two digit country code (i.e. US for United States)


    Specify Details to Generate CSR Key

  5. Select Cryptographic service provider from the list, select the bit length of the encryption key and click Next button.

    Select Cryptographic Service Provider for SSL Certificate

  6. Specify filename with full path where you need your csr key. You can also click on button to move to the particular path and provide the file name. Click Finish button to generate CSR Key file.

    Specify File Name for the Certificate Request

  1. Your CSR key for SSL Certificate is generated. Now open your csr key file and copy it including the “-----BEGIN NEW CERTIFICATE REQUEST-----” and “-----END NEW CERTIFICATE REQUEST-----” lines. Paste this code in online order process and complete the ordering process.

When you get the SSL Certificate, perform following steps to install it:

  1. Open IIS Manager.

  2. Click on Server Certificates.

    Select Server Certificates Option

  1. Select Complete Certificate Request option from right side pane.

    Complete Certificate Request

  1. You will see Complete Certificate Request wizard. Specify full path of your certificate or select it by clicking on… button. Provide a unique friendly name to identify your SSL Certificate and select certificate store, normally it should be Personal.

    Select File that Contains SSL Certificate

  2. Click on Ok button. Your SSL certificate is installed successfully.

  3. Now you will need to assign this certificate to your website.

  4. From the IIS Manager, select the website in which you want to assign SSL Certificate.

  5. From the right side action pane, click on Bindings.

    Select IIS Bindings Option


  1. A Site Bindings dialog box will be displayed. Default binding for the website will be on port 80. Select http type and click on Edit button, if you want to use only https:// protocol for your website.

  2. However, if you wish to run your website on both the protocol (i.e. http:// and https://), click on Add button to add bindings.

    Add New Website Binding for SSL

  1. Add Site Binding dialog box will be appear, Choose https as a type of binding, select unique IP address for your website. https:// protocol uses 443 port, keep this port as it is. The Hostname is an optional field, type hostname in Host Header box if you wish. From the dropdownlist, select the name of the certificate which we have created earlier.

    Select HTTPS with Port Configuation to Bind SSL Certificate

  1. Click on OK button. To check the SSL is installed and configured properly, click on Browse button.

    Browse HTTPS Binding to Verify SSL Certificate

If your website will load without any error, your SSL Certificate is configured properly.
 

  • 2 Users Found This Useful

Was this answer helpful?


Related Articles

How to import SSL certificate in Windows server?

To import SSL Certificate in Windows Server, firstly, you need to export the SSL certificate....

How to Fix HTTP Error 500 (or 500.21) - Internal Server Error Handler SSINC-shtml?

Error Message HTTP Error 500 (or 500.21) - Internal Server Error Handler SSINC-shtm' handler...

Get to know about SSL

This article will provide you the brief idea of SSL. Starting with what is SSL... The Secure...

How to resolve configuration error of 'targetFramework'?

Steps to Change Application Pool of a Website from IIS: Login to your VPS. Open Start >...

How to Backup/Restore IIS7 Configuration?

IIS 7 automatically makes history snapshots of ApplicationHost.config each time a change is...