Installing your ssl Certificate on a Microsoft IIS 5.x / 6.x
1. Save the certificate files from the email you received.
to your computer. You may use whatever filename and extension that you want so long as you remember what you used. It is suggested that you save the files with a .cer extension which will make importing the certificates into IIS easier.
2. Installing the Root & Intermediate Certificates:
You will have received 4 Certificates:
- (Root CA Certificate - UTN-USERFirst-Hardware.crt
- Intermediate CA Certificate - AddTrustUTNServerCA.crt
- Intermediate CA Certificate - PostiveSSLCA.crt
- Your SSL Server Certificate - yourdomain_com.crt
Save these Certificates to the desktop of the webserver machine, then:
- Click the Start Button then select Run and
type mmc
- Click Console and select Add/Remove Snap in
- Select Add, select Certificates from the
Add Standalone Snap-in box and click Add
- Select Computer Account and Local Computer then click Finish
- Close the Add Standalone Snap-in box, click OK in
the Add/Remove Snap in
- Return to the MMC
Root Certificate:
- To install the UTN-USERfirst-Hardware Root Certificate:
- Right click the Trusted Root Certification Authorities,
select All Tasks, select Import.
- Locate the UTN-USERfirst-Hardware Certificate and click
Next.
- When the wizard is completed, click Finish.
Intermediate Certificates:
- To install the PostiveSSLCA certificate & AddTrustUTNServerCA intermediate Certificates:
- Right click the Intermediate Certification Authorities,
select All Tasks, select Import.
- Complete the import wizard again, but this time locating
the PostiveSSLCA Certificate when prompted
for the Certificate file.
- Repeat for the AddTrustUTNServerCA intermediate certificate
Check your progress:
- Ensure that the UTN-USERfirst-Hardware
certificate appears under Trusted Root Certification Authorities
- Ensure that the PostiveSSLCA & AddTrustUTNServerCA
appears under Intermediate Certification Authorities
Installing your IIS SSL Certificate:
- Select Administrative Tools
- Start Internet Services Manager
- Open the properties window for the website. You can do
this by right clicking on the Default Website and selecting Properties
from the menu.
- Open Directory Security by right clicking on the
Directory Security tab
- Click Server Certificate. The following Wizard will
appear:
- Choose to Process the Pending Request and
Install the Certificate. Click Next.
- Enter the location of your IIS SSL certificate (you may
also browse to locate your IIS SSL certificate), and then click Next.
- Read the summary screen to be sure that you are processing
the correct certificate, and then click Next.
- You will see a confirmation screen. When you have read
this information, click Next.
- You now have an IIS SSL server certificate installed.
Important: You must now restart the computer
to complete the install
You may want to test the Web site to ensure that everything
is working correctly. Be sure to use when you test connectivity
to the site.
Troubleshooting
If you get a security message when viewing the site under https, check the certificate path. If the path does not contain the UTN-USERfirst-Hardware and PostiveSSLCA, similar to this:
Then the intermediate certificates are not properly installed, please check the portion of these instructions regarding the installation of the intermediate certificates.
The proper path looks like this in Internet explorer:
 OR this in firefox
|
