How to Install SSL on Windows Server (Microsoft IIS)?

SSL certificate enabled website are not only the safest but are also preferred by Google in search engine rankings in comparison to insecure websites. SSL offers a more secure and reliable performance by transporting the data in an encrypted form between the browser and the server.

When it comes to website security, SSL certificate is the gold standard of a secured website. In today’s digital age, it has become extremely important to offer safe, secure, and reliable digital solutions. In this article, we will talk about how to install SSL on Windows server in a step-by-step manner.

After getting Cheap SSL certificate, and you also need to create CSR (certificate signing request) and install it via IIS.

Let us show you the process to do it correctly.

How to Generate a CSR for Windows Server (Microsoft IIS)?

Open Internet Information Services (IIS) Manager

Click on the Start button, navigate to Control Panel, System and Security, Administrative Tools. There you need to select Internet Information Services (IIS) Manager.

Select the server on which you want to create the certificate

Look at the left Connections menu to select the name of the server (host) on which you will generate the certificate.

Navigate to Server Certificates

Click on the Server Certificates icon in the navigation menu under the Security option. It is in the center part.

Select Create a New Certificate

Go to the right in Actions menu and click on Create Certificate Request.

Fill in your CSR details

Go to the Distinguished Name Properties section, fill in the requisite CSR details, and then tap on the Next button.

Select the Service Provider and Bit Length

Navigate to the Cryptographic Service Provider Properties section, click on the Microsoft RSA SChannel Cryptographic Provider, and Bit Length of 2048, then go to Next. 2048 is chosen normally because it is an industry-standard.

However, you always have the choice to go with a larger key size but chose it only if required, as it may escalate latency and decrease the compatibility of the website.

Save the CSR

Click on the Browse button to select the location where you need to save the CSR as a “.txt” file and then click on the Finish button.

Generate the Order

Search and open the latest CSR from the designated location you choose in a text editor like Notepad and copy all the text, including:

—–BEGIN CERTIFICATE REQUEST—–

And

—–END CERTIFICATE REQUEST—–

(As seen in the image below)

Now, go back to the Generation Form on the website and paste the complete CSR in the empty text box and complete the certificate generation process.

Once the CSR is generated, your order will automatically become eligible for the validation process with the Certificate Authority (CA) that has issued the CSR. However, you would still require the certificate requester to complete the validation process based on the type of certificate you have purchased.

After the completion of the validation process and delivery of the SSL certificate from the CA, go ahead with the next step of SSL/TSL installation in the Windows server.

Here is how it is done.

How to Install an SSL/TLS Certificate in Windows Server (Microsoft IIS)?

Here are the following things that you would require for SSL/TSL certificate installation the Windows server.

Server Certificate

It is the same certificate that you have received from the Certificate Authority for your registered domain. CA normally sends this certificate through email. You can also log in and go to your account dashboard and click on your order to download the server certificate.

Intermediate Certificates

Go to the ZIP folder to Intermediate certificates that are also referred to as a CA bundle in some cases. You can also download the required CA bundle to get your certificates.

Private Key

Private Key file is available in the server. You also get this file if you have generated the CSR through a server or tool. You might not see the private key immediately on the Microsoft IIS. You need to export it.

Installation Instructions

Launch IIS Manager

Click on the Start button and go to the Control Panel, System and Security, Administrative Tools, and then select the Internet Information Services (IIS) Manager.

Select Server Name

Look at the left Connections menu to select the server name (host) on which you want to install your website’s SSL certificate.

Click Server Certificates

Click on the center menu and go to the Server Certificates icon that is present under the Security section. Look near the bottom to easily find it.

Click on Complete Certificate Request

Navigate to the right Actions menu and click on the Complete Certificate Request.

Browse the Server Certificate

Go to the Complete Certificate Request wizard, click on “…” to browse and select Your Server Certificate file that you have earlier saved on the desktop of your server.

Name the Certificate

Enter a name that you can easily remember. The name would be used as an internal reference name to recognize the file later.

Select Personal

Click on the Personal to select it as your certificate store for the newly generated certificate.

Final Step

Click on the OK button. After that, the newly installed certificate will appear in the refreshed Server Certificate List in a few moments.

Winding-Up

The correct installation of SSL is crucial for any website’s safety and security. I hope these steps would help you to install SSL on Windows Server (Microsoft IIS) easily. With the steps as mentioned above, you can easily install the SSL.

However, keep that in mind that after installing the SSL, you need to keep the website’s credentials safe and take all other security measures to maintain absolute security.