Knowledge Base

How to Install an SSL Certificate on Windows Server 2008 (IIS 7.0)

Quick and Easy Way to Install SSL on Windows Server 2008 (IIS 7.0)
Windows Server 2008 (IIS 7) is one of the most widely used web servers in the world. Recently, we've been getting a lot of queries regarding SSL setup. We are always here to help you. We've tried to explain the setup process as simply as we can, so you won't run into many problems.
This post will help you install the SSL certificate you got from your certificate authority. If you are still undecided about choosing the right certificate provider, click here for our detailed comparison of SSL providers worldwide.

Follow the steps below to install SSL certificate on IIS7.

Step 1: Create a Certificate Signing Request (CSR) in IIS 7 (Window Server 2008)
Before proceeding to the setup part, you must have created a CSR first. To do this, follow the given instructions.

First, go to Administrative Tools from the Start menu and click on Internet Information Services (IIS) Manager.

You will find the Connections column on the left side of IIS. Double click on Server Certificates.

Now click on Create Certificate Request… option in the Actions column on the right.

Enter all the details in Request Certificate and click Next.

Select Default Encryption Service Provider and set Bit Length to 2048 bit or higher and click on Next button.

Now browse and find where you want to save the CSR file.

Click Finish.
Step 2: Install the certificate
Save the certificate files from the certificate authority to your server before starting the configuration process.

First, go to Administrative Tools from the Start menu and click on Internet Information Services (IIS) Manager.
Click the name of your server in the Connections column on the left. Double click on Server Certificates.

Now click on Complete Certificate Request… option in the Actions column on the right.

Now browse, find and select the server certificate file you got from the CA by clicking the button with three dots. Click Ok after this is done.

If everything goes well, you will see your newly installed certificate in the Server Certificate column in the middle. If you don't want it, contact your SSL provider.

Step 3: Connect the certificate
In the Links column on the left, expand the Sites folder. Click the website you want to link the certificate to.
Click Links… in the Actions column on the right.

Now, click on Add… The Add Site Link window will appear.

Https for Exchange Type. Now select the SSL certificate you just installed and click the OK button.

The link for port 443 will be listed in Site Bindings and the Close button will be clicked.

Step 4: Install the Intermediate Certificate
Often times, the certification authority issues an intermediate certificate. Therefore, you must install this Intermediate Certificate on your web server. Users may receive a Certificate not trusted error if it is not installed. You definitely don't want this, do you? So, follow the steps below to install the intermediate certificate.

First, download the intermediate certificate to your server.
Open the certificate.
A Certificate window will appear. Click Install Certificate Now. This prompts the certificate import wizard to start.
Now click on Place all certificate files in the following store and click browse.

Now click on Place all certificate files in the following store and click browse.

The Select a Certificate Store window will appear. Now check the Show physical stores checkbox and expand Intermediate Certification Authorities.
Now select the Local Computer folder under it.

Choose OK.
Click Next
Finish installing the intermediate certificate.
Now close and restart the IIS manager.