How to Install SSL Certificate on Windows Server 2008 (IIS 7.0)

A Quick and Straightforward Way to Install SSL on Windows Server 2008 (IIS 7.0)

Windows Server 2008 (IIS 7) is one of the widely used web servers in the world. Lately, we have been getting a lot of queries regarding SSL installation on it. Well, we’re always here to help you. We have tried to explain the installation process as simple as we could so that you don’t face many problems.

This post will help you install the SSL certificate you got from your certificate authority. If you are still undecided for choosing the right certificate provider, click here for our detailed comparison of worldwide SSL providers.

Follow the below steps to install SSL certificate on IIS7.

Step 1: Generate Certificate Signing Request (CSR) on IIS 7 (Window Server 2008)

Before you get to the installation part, you need to have generated a CSR first. Follow the given instructions to do so.

First, go to Administrative Tools from the Start menu and click on Internet Information Services (IIS) Manager.

open internet information server manager

You’ll find Connections column on the left-hand side of IIS. Double-click on Server Certificates.

Now, click on Create Certificate Request… situated in the Actions column on the right-hand side.

Enter all the details in the Request Certificate and Click on Next.

Select your default Cryptographic Service Provider and set the Bit Length to 2048 bit or higher and Click on Next button.

cryptographic service provider properties

Now browse and locate where you want to save the CSR file.

Click on Finish.

Step 2: Install the certificate

Before starting the configuration process, save the certificate files you received from the certificate authority on your server.

First, go to Administrative Tools from the Start menu and click on Internet Information Services (IIS) Manager.

Click on the name of your server in the Connections column on the left. Double-click on Server Certificates.

Now, click on Complete Certificate Request… situated in the Actions column on the right-hand side.

Now browse, locate, and select the server certificate file you received from the CA by clicking on the button with three dots. Click Ok once this is done.

If all went right, you will see your newly installed certificate in the Server Certificate column in the middle. Contact your SSL provider if you don’t.

Step 3: Bind the certificate

Expand the Sites folder in the Connections column on the left. Click on the website on which you want to bind the certificate.
Click on Bindings… in the Actions column on the right-hand side.

Now, click on the Add… Add Site Binding window will appear.

Change the Type to https. Now choose the SSL certificate that you just installed and click on OK button.

The binding for port 443 will be listed in the Site Bindings and click on Close button.

Step 4: Install Intermediate Certificate

Most of the times, the certificate authority will issue an intermediate certificate. Therefore, you must install this Intermediate Certificate on your web server. If not installed, the users might get Certificate not trusted error. You certainly don’t want that, do you? So, follow the below steps to install the intermediate certificate.

First, download the intermediate certificate on your server.
Open the certificate.
A Certificate window will appear. Now click on Install Certificate This will prompt certificate import wizard to start.

Now, click on Place all certificate files in the following store and click on the browse.

Now, click on Place all certificate files in the following store and click on the browse.

A Select Certificate Store window will appear. Now check the Show physical stores check box and expand the Intermediate Certification Authorities.
Now select the Local Computer folder under it.