Differences

This shows you the differences between two versions of the page.

--- wiki:create_webserver_ssl_certificate_for_iis_default_website [2017/10/30 00:15] – wikiadmin
+++ wiki:create_webserver_ssl_certificate_for_iis_default_website [2017/10/30 03:52] – [Create a CSR (Certificate Service Request) to Submit to the CA (Certificate Authority)] wikiadmin
@@ Line 1: / Line 1: @@
 ======Create Webserver SSL Certificate for IIS Default Website======
-Open IIS Administration
+====Create a CSR (Certificate Service Request) to Submit to the CA (Certificate Authority)====
-Click +Websites
-Right-click Default Website and select Properties.
+  *Open IIS Administration (specific steps below are for IIS6)
-Select the Document Security Tab.
+  *Click +Websites
-Under the section of Secure Communications, click Server Certificate button and the Web Server Certificate Wizard starts.  Click Next.
+  *Right-click Default Website and select Properties.
-Select radio button next to Create a New Certficate, and click Next.
+  *Select the Document Security Tab.
-Select radio button next to Prepare the request now, but send it later, and click Next.
+  *Under the section of Secure Communications, click Server Certificate button and the Web Server Certificate Wizard starts.  Click Next.
-Type a Name for the New Certificate
+  *Select radio button next to Create a New Certficate, and click Next.
-Name: host.domain.com
+  *Select radio button next to Prepare the request now, but send it later, and click Next.
+  *Type a Name for the New Certificate
+<code>Name: host.domain.com
 Bit length:  accept 1024
 Check the box for Select Cryptographic Provider (CSP), and click Next.
@@ Line 18: / Line 20: @@
 Common Name for your site:  host.domain.com
 Country: US (United States)
-State / Province: enter name of your state. Next.
+State / Province: enter name of your state. Next.</code>
 Save the certreq.txt file to your documents folder.
-It is time to upload the certreq.txt file to your CA Certificate Service.
+It is time t
-In Internet Explorer address input on the server, go to <code>http://exchange_server_IP/certsvr</code>
+o
+====Upload the certreq.txt file to your Certificate Authority (CA) Certificate Service====
+In Internet Explorer address input on the server, go to
+<code>http://exchange_server_IP/certsvr</code>
 Upon login challenge, respond by entering the login credentials of the server Administrator, such as:
@@ Line 45: / Line 50: @@
 Download certificate file as - Base64 encoded - named certnew.cer and save it to your documents folder.
-Now its time to ====import the web server certificate to the IIS default website====
+Now its time to
+ ====import the web server certificate to the IIS default website====
-You can check the Certificate Authority (start, programs, administrative tools, certificate authority) to see if the issued web server certificate is listed there. Close CA.
+  *You can check the Certificate Authority (start, programs, administrative tools, certificate authority) to see if the issued web server certificate is listed there.
+  * *Close CA.
-Open IIS Administration, and right click Default Website, and select Properties.
+  *Open IIS Administration, and
-Select Document Security Tab and click the button for Server Certificate.  The Wizard commences again.  Click Next.  Select radio button to Process Pending Request and Install Certificate. Click Next.  Select:  CertNew.cer file that you downloaded and saved earlier.  Click Open, Click Next. Select Port 443 to remain as HTTPS / SSL port.
+  *right click Default Website, and
+  *select Properties.
+  *Select Document Security Tab and
+  *click the button for Server Certificate.  The Wizard commences again.  Click Next.
+  *Select radio button to Process Pending Request and Install Certificate. Click Next.
+  *Select:  CertNew.cer file that you downloaded and saved earlier.
+  *Click Open, Click Next.
+  *Select Port 443 to remain as HTTPS / SSL port.
-Review the certificate information shown and to Install Certificate Click Next.
+  *Review the certificate information shown and to Install Certificate Click Next.
-The information shown will look something like this:
+**The information shown will look something like this:**
-Issued To:  host.domain.com
+<code>Issued To:  host.domain.com
 Issued By:  host.domain.com
 Expiration Date:  9-18-2011
@@ Line 64: / Line 78: @@
 State: Confusion (or the name of your state)
 Organization:  XYC Inc
-Organization Unit: XYZ Inc Services
+Organization Unit: XYZ Inc Services</code>
-Click Next - Successfully installed - Click Finish
+  *Click Next - Successfully installed - Click Finish
-Suggest restarting w3svc
+  *Suggest restarting w3svc
-How?  Start, Run, type CMD, OK or enter.
+  *How to restart w3svc?
-at command prompt type -
+  *Open a command prompt > click Start, Run, type CMD, OK or enter.
-net stop w3svc (enter)
+  *At command prompt type -
-  Service is stopping
+<code>net stop w3svc (enter)</code>
-net start w3svc (enter)
+**Service is stopping**
-  Service is starting
+<code>net start w3svc (enter)</code>
+**Service is starting**