How to add SSL Certificates in IIS7
(Many thanks to Yehuda Katz for this instructions)
The process for adding SSL certificates in IIS7 differs from IIS6 most in the interface. The overall steps required are similar.
This guide was made using Windows Vista Ultimate with IIS7 and FTP7.
This guide does not include instructions for adding the root and intermediary certificates.
- Open the IIS7 Manager
- Select your server and choose Server Certificates.
- In the Actions column, choose Create Certificate Request…
- Fill in the requested information for your certificate. Whatever you write here will be the DN of your certificate.
The common name should be the servers external FQDN (Fully Qualified Domain Name), which means the address which users type when they access the website from the Internet. The common name is typically www.domain.com NOT https://www.domain.com, mail.domain.com/exchange or your public IP address.
- Choose key length (2048 or higher is recommended)
- Choose a place to save your key request. You will need it soon.
- Open the CSR that you created and submit it to your certificate provider.
- Your certificate provider will send you the certificate. Import it by choosing Complete Certificate Request… from the Actions menu.
- Your certificate should now be listed in the Server Certificates List.
- To add SSL support to your site, right click the site and choose Edit Bindings…
- Add a binding of type https and choose the certificate that you would like to use from the dropdown.
- If you would like to require SSL, go to the site settings and choose SSL Settings
- And choose Require SSL
- To add SSL to an FTP site (available only if you have FTP7), open the FTP site and choose FTP SSL Settings
- Choose Allow or Require or make your own combination.
