How to create a CSR and install an SSL certificate on IIS 8, 8.5


In previous articles, Taimien phi.vn showed you how to create a CSR file and install an SSL certificate on IIS 7 (Windows Server 2008). The following article will guide you how to create a CSR and install an SSL certificate on IIS 8, 8.5.


How to create CSR and install SSL certificate on IIS 8, 8.5 is quite simple. Basically the steps are the same as How to create a CSR file and install an SSL certificate on IIS 7 (Windows Server 2008) .

How to create a CSR and install an SSL certificate on IIS 8 and 8.5

Step 1: Create a CSR on IIS or IIS 8.5 on Windows Server 2012

1. On the Start Menu, find and open Internet Information Services (IIS) Manager.

2. On the Connections window, find and click the server.

3. On the home page of the machine, in section IIS, find and double click Server Certificates.

Creating and installing shared data on Windows 8 8 5 2

4. Above Actions menu (in the right pane), click Create Certificate Request.

Creating and installing shared data on Windows 8 8 5 3

5. In the Request Certificate wizard, on the page Distinguished Name Properties, fill in the information below and click Next.

– Common name: Fully qualified domain name (FQDN) (such as Taimienphi.vn).

– Organization: The legal registered name of your company.

– Organizational unit: The name of the department in your company. This entry is usually IT, Web Security or blank.

– City / locality: Your company location.

– State / province: Province / City where the company is located.

– Country / region: The country / region where your company is located. Use the menu to select your country.

Creating and installing shared data on Windows 8 8 5 4

6. On the page Cryptographic Service Provider Properties, provide the following information and then click Next.

– Cryptographic service provider: From the dropdown menu, select Microsoft RSA SChannel Cryptographic Provider (unless you have a specific CSP provider).

– Bit length: From the menu, you choose 2048 (unless you have a reason to use a larger string).

how to create and set up ssl on iis 8 8 5 5

7. On the page File Name, in section Specify a file name for the certificate request, click the 3-dot icon button to specify where to save the CSR.

Note: Remember the name of the file and where to save your CSR file. If you enter a name without specifying a location, the default CSR file will be saved in C: Windows System32.

Creating and installing shared data on Windows 8 8 5 6

8. Once done, click Finish.

9. Open the CSR file in any text editor such as Notepad, then copy the following line and paste it into the DigiCert order form:

—– BEGIN NEW CERTIFICATE REQUEST —–

And:

—– END NEW CERTIFICATE REQUEST —–

Creating and installing shared data on Windows 8 8 5 7

10. After receiving the SSL certificate from DigiCert, you can install these certificates.

Step 2: Install and configure an SSL certificate on IIS 8 or IIS 8.5 on Windows Server 2012

After confirming and being granted an SSL certificate, you can install the certificate on the Windows Server 2012 server, at the location where you created the CSR. Then configure the server to use this SSL certificate.

How to install the SSL certificate and configure the server to use the certificate

Install the SSL certificate

1. On the server where you created the CSR, save the SSL certificate file .er (such as your_domain_com.cer) you receive from DigiCert.

2. On the Start Screen, find and open Internet Information Services (IIS) Manager.

3. In the Connections panel, find and click the server.

4. On the server home page (in the middle frame), in the section IIS, double click Server Certificates.

Creating and installing shared data on Windows 8 8 5 8

5. In the Actions menu (in the middle panel), click Complete Certificate Request.

How to create and set up ssl on 8 8 5 9

6. In the Complete Certificate Reques wizard, on the page Specify Certificate Authority Response Fill in the information below:

– File name containing the certificate authority’s response: Click the 3-dot icon button to find the file .er you got from DigiCert.

– Friendly name: Enter 1 name for the certificate. This name is not part of the certificate, but is used to identify the certificate.

Note: You should add a digital certificate provider (CA) and an expiration date at the end of the certificate name. This is to help identify the issuer and expiration date of each certificate, and also to distinguish multiple certificates with the same domain name.

– Select a certificate store for the new certificate: From the dropdown menu, choose Personal.

Creating and installing shared data on Windows 8 8 5 10

7. Click OK, got it to install the certificate.

8. After installing the SSL certificate successfully, the next step you need to do is to configure the website to use this certificate.

Assign an SSL certificate

9. On the Internet Information Services (IIS) Manager window, in the Connections table, expand the name of the server where the certificate is to be installed. Then expand the item Sites and click the page you want to secure using the SSL certificate.

10. In Actions menu (right frame), click Bindings.

Creating and installing shared data on Windows 8 8 5 11

11. On the Site Bindings window, click Add

Creating and installing shared data on Windows 8 8 5 12

12. On the window Add Site Binding, select the information as below and then click OK:

– Type: From the list in the drop down menu, choose https.

– IP address: From the dropdown menu, select the website’s IP address or select All Unassigned.

– Port: Import 443 (SSL uses port 443 to secure traffic).

– SSL certificate: From the drop-down menu, select your new SSL certificate.

Creating and installing shared data on Windows 8 8 5 13

13. So your SSL certificate is installed, and the site has been configured to accept secure connections.

Creating and installing shared data on Windows 8 8 5 14

Install and configure the server to use SSL certificates using SNI

Follow the steps below to install multiple SSL certificates and configure the server to use these certificates using SNI.

Install the SSL certificate

Follow these instructions only 1 time (for the first SSL certificate):

1. On the server where you created the CSR, save the SSL certificate file .er again.

2. On the Start Screen, find and open Internet Information Services (IIS) Manager.

3. On the Connections panel, find and click the server.

4. On the server home page (in the middle pane), in the IIS section, double-click Server Certificates.

Creating and installing shared data on Windows 8 8 5 15

5. Above Actions menu (in the right pane), click Complete Certificate Request.

Creating and installing shared data on Windows 8 8 5 16

6. On the Complete Certificate Request wizard, on the Specify Certificate Authority Response page, enter the following information:

– File name containing the certificate authority’s response: Click on the 3-dot icon to find the file .er that you received earlier.

– Friendly name: Enter a name for the certificate. This name is not part of the certificate, but is used to identify the certificate.

Note: You should add a digital certificate provider (CA) and an expiration date at the end of the certificate name. This is to help identify the issuer and expiration date of each certificate, and also to distinguish multiple certificates with the same domain name.

– Select a certificate store for the new certificate: From the dropdown menu, choose Web Hosting.

Creating and installing shared data on Windows 8 8 5 17

7. Click OK, got it to install the SSL certificate.

Note: The problem with IIS 8 is that when clicking OK, an error appears Failed to remove the certificate. If this is the same server you used to create the CSR, the error may be ignored. Just click OK, got it and press F5 to refresh the list of server certificates.

If a new certificate is displayed in the list, the certificate has been successfully installed. However, if you want, you can check the certificate also in the Web Hosting certificate store. If the certificate does not appear in the Web Hosting certificate store, you can move the certificate into it manually.

If the certificate does not appear on the list after being refreshed, you will have to reissue your certificate using the new CSR.

8. After successfully installing the SSL certificate, the next step now is to configure the website to use this certificate.

9. On the window Internet Information Services (IIS) Manager, in the table Connections, expand the name of the server installing the certificate. Then expand Sites then click the page you want to secure using the SSL certificate.

10. In Actions menu (right frame), click to select Bindings.

Creating and installing shared data on Windows 8 8 5 18

11. On the Site Bindings window, click Add

Creating and installing shared data on Windows 8 8 5 19

12. On the Add Site Binding window, select the following information and then click OK, got it:

– Type: From the list in the drop down menu, choose https.

– IP address: From the dropdown menu, select the website’s IP address or select All Unassigned.

– Port: Import 443 (SSL uses port 443 to secure traffic).

– SSL certificate: From the list in the drop-down menu, select the SSL certificate you installed in step 7.

Creating and installing shared data on Windows 8 8 5 20

13. The first SSL certificate was installed successfully, and the site was also configured to use secure connections.

Creating and installing shared data on Windows 8 8 5 21

Install additional SSL certificates

To install and assign additional SSL certificates, repeat the steps below:

1. On the server that creates the SCR, save the .er certificate file again.

2. From the Start Screen, find and open Internet Information Services (IIS) Manager.

3. On the board Connections, find and select the server.

4. On the server home page (in the middle pane), under IIS, find and double-click Server Certificates.

How to create and install ssl on iis 8 8 5 22

5. Above Actions menu (right frame), click Complete Certificate Request.

Creating and installing shared data on Windows 8 8 5 23

6. On the Complete Certificate Request wizard, on the Specify Certificate Authority Response page, enter the following information:

– File name containing the certificate authority’s response: Click on the 3-dot icon to find the file .er that you received earlier.

– Friendly name: Enter a name for the certificate. This name is not part of the certificate, but is used to identify the certificate.

Note: You should add a digital certificate provider (CA) and an expiration date at the end of the certificate name. This is to help identify the issuer and expiration date of each certificate, and also to distinguish multiple certificates with the same domain name.

– Select a certificate store for the new certificate: From the dropdown menu, choose Web Hosting.

Creating and installing shared data on Windows 8 8 5 24

7. Click OK, got it to install the SSL certificate.

8. After successfully installing the SSL certificate, the next step now is to configure the website to use this certificate.

9. On the Internet Information Services (IIS) Manager window, in the Connections table, expand the name of the server where the certificate is installed. Then expand Sites then click the page you want to secure using the SSL certificate.

10. In Actions menu (right frame), click Bindings.

Creating and installing shared data on Windows 8 8 5 25

11. On the Site Bindings window, click Add

Creating and installing shared data on Windows 8 8 5 26

12. On the Add Site Binding window, select the following information and then click OK:

Type: From the list in the drop down menu, choose https.

– IP address: From the dropdown menu, select the website’s IP address or select All Unassigned.

– Port: Import 443 (SSL uses port 443 to secure traffic).

– SSL certificate: From the list in the drop-down menu, select the SSL certificate you installed in step 7.

– Host name: Enter the name of the server you want to secure.

– Require server name indication: Check the box under the server name.

Note: This option is required for any additional certificates / websites after installing the first certificate on the main page.

– SSL certificate: From the list in the drop-down menu, select the SSL certificate you installed in step 7.

Creating and installing shared data on Windows 8 8 5 27

13. Additional certificates are successfully installed, and the site is also configured to use secure connections.

Diagnose and troubleshoot SSL certificate issues

Not like How to fix SSL connection error On your computer, if your website is publicly accessible, you can use the SSL Installation Diagnostics Tool to diagnose SSL problems to find a solution.

Download the SSL Installation Diagnostics Tool and install it here: Download SSL Installation Diagnostics Tool

https://thuthuat.taimienphi.vn/cach-tao-csr-va-cai-dat-chung-chi-ssl-tren-iis-8-8-5-32193n.aspx
So above, Taimienphi.vn has shown you how to create CSR and install SSL certificate on IIS 8, 8.5. Also readers can search on Taimienphi.vn for more information on how to create a CSR file and install an SSL certificate on IIS 7 (Windows Server 2008). Good luck.

.

Add a Comment

Your email address will not be published. Required fields are marked *