Install an SSL Certificate on Microsoft IIS 4
After you create your CSR, get your SSL Certificate, and the validation and processing are done, you are ready to install your SSL Certificate on your site's server. We will send you the certificate by email. It will be an attached text file Once you have this file, here is how you install it.
How to Install an SSL Certificate on a Microsoft IIS 4 Server:
- First you will need your Root, Intermediate, and Primary Certificate files. You can find and download them in your Customer Account.
- Open the Key Manager.
- Click on the key in the www directory. This is usually represented as a broken key with a line through it.
- Select Install Key Certificate and install the new IIS Primary SSL Server Certificate - this will be my_domain.crt.
- Enter the Password.
- You will need the IP and Port Number for the next step.
- The installation will ask you for your bindings.
- If this is the only IIS SSL Certificate installed on your server, then select Any Assigned. If you want to have multiple certificates on the same server, you'll need an individual IP Address for each one of them. This is because SSL does not support host headers, an identifying part of HTTP messages.
- Find the Computers menu and choose it.
- You will need the Commit Changes option. Alternatively, you can close the Key Manager normally and hit "Yes" when it checks if you want to make changes.
- Your Primary SSL Certificate has now been installed on your IIS 4 Server. Congratulations!
- Now, we strongly recommend making an immediate backup of the key.
- Do this by clicking the Key Menu, selecting Export, then clicking on Backup File.
- Store your backup file in a secure place somewhere that is not accessible from the web server. This is a very important security measure.
In order for browsers to begin to show your certificate as trusted, you will first need to install the Intermediate certificate Files.
How to Install the Intermediate Certificate Files on Your IIS 4 Server
After you have followed all the steps outlined earlier in this article, restart the server running IIS 4. The steps after this depend on whether you have Service Pack 3 or if you have a more recent version of Service Pack.
What to do if you Have ServicePack 3
- Open each certificate (the Intermediate and Root Certificates) in your Internet Explorer. Then click Install Certificate.
- Then you have to use this IIS CA batch file to move all of the root certificates from your Internet Explorer to the IIS Certificate Store.
What to do if you have ServicePack 4 or later versions
- Open the installation wizard by double-clicking the root certificate (TrustedRoot.crt).
- Choose Place all certificates in the following store, then hit Browse.
- Navigate through Show physical stores, select Trusted Root Certification Authorities and go to Local Computer. Hit Ok then click Next in the install wizard, then hit Finish.
- The steps for the intermediate certificate are the same, except they must be placed in the Intermediate Certification Authorities store.
- Finally, you must restart the server. If you only restart IIS, this will not activate your SSL Certficate.
You should now be able to start accepting secure connections on your server. Congratulations, you're done!
Please contact us if you have any questions or issues.