Install Config Wiki

All about installing, configuring and troubleshooting

User Tools

Site Tools


wiki:create_webserver_ssl_certificate_for_iis_default_website

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
wiki:create_webserver_ssl_certificate_for_iis_default_website [2017/10/30 00:15] wikiadminwiki:create_webserver_ssl_certificate_for_iis_default_website [2017/10/30 03:52] (current) – external edit 127.0.0.1
Line 1: Line 1:
 ======Create Webserver SSL Certificate for IIS Default Website====== ======Create Webserver SSL Certificate for IIS Default Website======
  
-Open IIS Administration +====Create a CSR (Certificate Service Request) to Submit to the CA (Certificate Authority)==== 
-Click +Websites + 
-Right-click Default Website and select Properties. +  *Open IIS Administration (specific steps below are for IIS6) 
-Select the Document Security Tab. +  *Click +Websites 
-Under the section of Secure Communications, click Server Certificate button and the Web Server Certificate Wizard starts.  Click Next. +  *Right-click Default Website and select Properties. 
-Select radio button next to Create a New Certficate, and click Next. +  *Select the Document Security Tab. 
-Select radio button next to Prepare the request now, but send it later, and click Next. +  *Under the section of Secure Communications, click Server Certificate button and the Web Server Certificate Wizard starts.  Click Next. 
-Type a Name for the New Certificate +  *Select radio button next to Create a New Certficate, and click Next. 
-Name: host.domain.com+  *Select radio button next to Prepare the request now, but send it later, and click Next. 
 +  *Type a Name for the New Certificate 
 +<code>Name: host.domain.com
 Bit length:  accept 1024 Bit length:  accept 1024
 Check the box for Select Cryptographic Provider (CSP), and click Next. Check the box for Select Cryptographic Provider (CSP), and click Next.
Line 18: Line 20:
 Common Name for your site:  host.domain.com Common Name for your site:  host.domain.com
 Country: US (United States) Country: US (United States)
-State / Province: enter name of your state. Next. +State / Province: enter name of your state. Next.</code> 
 Save the certreq.txt file to your documents folder. Save the certreq.txt file to your documents folder.
  
-It is time to upload the certreq.txt file to your CA Certificate Service. +It is time 
-In Internet Explorer address input on the server, go to <code>http://exchange_server_IP/certsvr</code>+
 +====Upload the certreq.txt file to your Certificate Authority (CACertificate Service==== 
 +In Internet Explorer address input on the server, go to  
 +<code>http://exchange_server_IP/certsvr</code>
  
 Upon login challenge, respond by entering the login credentials of the server Administrator, such as: Upon login challenge, respond by entering the login credentials of the server Administrator, such as:
Line 45: Line 50:
 Download certificate file as - Base64 encoded - named certnew.cer and save it to your documents folder. Download certificate file as - Base64 encoded - named certnew.cer and save it to your documents folder.
  
-Now its time to ====import the web server certificate to the IIS default website====+Now its time to 
 + ====import the web server certificate to the IIS default website====
  
-You can check the Certificate Authority (start, programs, administrative tools, certificate authority) to see if the issued web server certificate is listed there. Close CA.+  *You can check the Certificate Authority (start, programs, administrative tools, certificate authority) to see if the issued web server certificate is listed there. 
 +  * *Close CA.
  
-Open IIS Administration, and right click Default Website, and select Properties. +  *Open IIS Administration, and  
-Select Document Security Tab and click the button for Server Certificate.  The Wizard commences again.  Click Next.  Select radio button to Process Pending Request and Install Certificate. Click Next.  Select:  CertNew.cer file that you downloaded and saved earlier.  Click Open, Click Next. Select Port 443 to remain as HTTPS / SSL port. +  *right click Default Website, and 
 +  *select Properties. 
 +  *Select Document Security Tab and  
 +  *click the button for Server Certificate.  The Wizard commences again.  Click Next.   
 +  *Select radio button to Process Pending Request and Install Certificate. Click Next.   
 +  *Select:  CertNew.cer file that you downloaded and saved earlier.   
 +  *Click Open, Click Next.  
 +  *Select Port 443 to remain as HTTPS / SSL port. 
  
-Review the certificate information shown and to Install Certificate Click Next.+  *Review the certificate information shown and to Install Certificate Click Next.
  
-The information shown will look something like this:+**The information shown will look something like this:**
  
-Issued To:  host.domain.com+<code>Issued To:  host.domain.com
 Issued By:  host.domain.com Issued By:  host.domain.com
 Expiration Date:  9-18-2011 Expiration Date:  9-18-2011
Line 64: Line 78:
 State: Confusion (or the name of your state) State: Confusion (or the name of your state)
 Organization:  XYC Inc Organization:  XYC Inc
-Organization Unit: XYZ Inc Services+Organization Unit: XYZ Inc Services</code>
  
-Click Next - Successfully installed - Click Finish +  *Click Next - Successfully installed - Click Finish 
-Suggest restarting w3svc +  *Suggest restarting w3svc 
-How?  Start, Run, type CMD, OK or enter. +  *How to restart w3svc?   
-at command prompt type -  +  *Open a command prompt > click Start, Run, type CMD, OK or enter. 
-net stop w3svc (enter) +  *At command prompt type -  
-  Service is stopping +<code>net stop w3svc (enter)</code> 
-net start w3svc (enter)  +**Service is stopping** 
-  Service is starting+<code>net start w3svc (enter)</code>  
 +**Service is starting**
wiki/create_webserver_ssl_certificate_for_iis_default_website.1509322500.txt.gz · Last modified: 2017/10/30 00:15 by wikiadmin