IIS 10: Install a certificate

After you request the certificate in our certificate portal and it's ready for installation, you must download the files we provide.

First, you must install the intermediate certificate included in your bundle to your Microsoft® IIS 10 server. You also can download the sf_iis_intermediates.p7b intermediate certificate from the repository.

Then, to install the primary SSL certificate, you must complete the pending request, bind the certificate to your website, and then restart your site.

Install an Intermediate Certificate in Microsoft IIS 10

1. Click Start, and then click Run....
2. Type mmc, and then click OK. The Microsoft Management Console (Console) window opens.
3. In the Console1 window, click the File menu, and then select Add/Remove Snap-in.
4. In the Add or Remove Snap-in window, select Certificates, and then click Add.
5. In the Certificates snap-in window, select Computer Account, and then click Next.
6. In the Select Computer window, select Local Computer, and then click Finish.
7. In the Add or Remove Snap-in window, click OK.
8. In the Console1 window, click + to expand the folder.
9. Right-click Intermediate Certification Authorities, mouse-over All Tasks, and then click Import.
10. In the Certificate Import Wizard window, click Next.
11. Click Browse to find the intermediate certificate file.
12. In the Open window, change the file extension filter to PKCS #7 Certificates (*.spc;*.p7b), select the *_iis_intermediates.p7b file, and then click Open.
    

    Note: Do not install your Leaf Certificate in this area. Doing so removes your certificate from the list, and you must reinstall it to correct the problem.

13. In the Certificate Import Wizard window, click Next.
14. Select Place all certificates in the following store, and then click Browse.
15. In the Select Certificate Store window, select Intermediate Certification Authorities, and then click OK.
16. In the Certificate Import Wizard window, click Next.
17. Click Finish.
18. Click OK.
19. Close the Console 1 window, and then click No to remove the console settings.

Install an SSL Certificate in Microsoft IIS 10

1. Launch the Server Manager.
2. From Tools, select Internet Information Services (IIS) Manager.
3. In the Connections panel on the left, click the server name for which you want to generate the CSR.
4. In the middle panel, scroll to the bottom, and then double-click Server Certificates.
5. In the Actions panel on the right, click Complete Certificate Request....
6. Do the following to install the certificate, and then click OK:
   • File name containing the certificate authority's response — Click ..., locate the .crt file on your computer, and then click Open.
   • Friendly name — Enter a unique name to identify the SSL certificate. For wildcard SSL certificates, make sure your friendly name matches your common name (such as *.coolexample.com).
   • Select a certificate store for the new certificate — Select Personal.
7. In the Connections panel on the left, select the name of the server on which you installed the certificate.
8. Click + to expand Sites, and then select the site you want to secure with the SSL certificate. (This process is called binding.)
9. In the Actions panel on the right, click Bindings....
10. Click Add....
11. Do the following to configure the settings, and then click OK:

    Field	What to do...
    Type	Select https.
    IP address	Select All Unassigned, or select the IP address of the site.
    Port	Type 443.
    SSL Certificate	Select the SSL certificate you just installed.

12. In the Actions panel on the right, click Restart to complete the installation process.

Visit your website at https://www.coolexample.com (replacing coolexample.com with your domain name) to verify the installation. If you have problems, see Test your SSL's configuration to help diagnose issues.

Note: As a courtesy, we provide information about how to use certain third-party products, but we do not endorse or directly support third-party products and we are not responsible for the functions or reliability of such products.

More info

• Troubleshoot a renewed certificate issue in Microsoft IIS