Step 1: Open IIS Manager
Click ‘Start‘ >> ‘Control Panel >> ‘Administrative Tools‘ >> then finally, ‘Internet Information Services (IIS) Manager‘.
Step 2: Select the Server You Originally Created the Request From
On the left is the ‘Connections‘ menu, select the server name used for generating the CSR. This will open a menu in the middle of IIS Manager.
Step 3: Navigate to Server Certificates
From this middle menu, select ‘Server Certificates’ which is listed under ‘Security‘.
Step 4: Complete the Certificate Request
On the right, a new menu will appear. Click the option ‘Complete Certificate Request‘.
Step 5: Specify Certificate Authority Response
The ‘Complete Certificate Request‘ Wizard will now request the ‘Certificate Authority Response‘. Under ‘File name containing the certificate authority’s response:‘ please click the ellipses ‘…’ to browse for your SSL Certificate. The preferred file types are .crt and .cer.
The Wizard will also request a ‘Friendly Name‘, this is not a part of the SSL Certificate. It is just an identifier you create to easily recognize the SSL Certificate. We recommend including the domain name, the issuing Certificate Authority (Trustico, for example), and the expiry date. yourdomain-Trustico-expiry
Step 6: Click Ok and Install the SSL Certificate
There is an issue with IIS that can occur upon installation. You may receive a message stating ‘ “Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created. “Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created.” You may also receive a message stating: “ASN1 bad tag value met.”
If this is the server you created the Certificate Request on, then it is likely that the SSL Certificate has actually installed despite the message(s). Click ‘OK‘, then close and reopen Internet Information Services (IIS) Manager to refresh your SSL Certificate Installations. Your new SSL certificate should be available in your list of installed SSL Certificates.
If, however, the SSL Certificate is still not present you may need to reissue your SSL Certificate. You will need to create a new Certificate Signing Request and then reissue the SSL Certificate.
Step 7: Binding the SSL Certificate
Return to the ‘Connections‘ menu from earlier and expand the server name where you installed the SSL Certificate. Expand ‘Sites‘ and select the site you are securing. Then in the ‘Actions‘ menu, select ‘Bindings…‘.
In the ‘Site Bindings‘ window, click ‘Add‘.
In the ‘Add Site Bindings‘ window, select the following options:
|Type:||In the drop-down list, select https.|
|IP address:||In the drop-down list, select the IP address of the site or select All Unassigned.|
|Port:||Type port 443. The port over which traffic is secure by SSL is port 443.|
|SSL certificate:||In the drop-down list, select your new SSL certificate (e.g., yourdomain.com).|
If you are using a Multi Domain/UCC SSL Certificate you may need to do this multiple times by specifying the Host Name (Domain Name) for each Domain hosted on this server that is listed on the SSL Certificate.
Your SSL Certificate is now successfully installed.