How to install SSL Certificate on Microsoft IIS 10 Server?

After generating CSR in IIS 10, it is time to install SSL certificate on IIS 10. The certificate authority sends an email with a zip file that contains generally the main certificate, root, and intermediate certificate (CA Bundle). Root and Intermediate certificates will be installed via MMC (Microsoft Management Console) for IIS. The rest main certificate will be installed in IIS 10 directly.

If you have not purchased a trusted CA SSL certificate yet, then you can check the list of different types of SSL certificates as below:

Product Name	Type	Sale Price	Retail Price	Details
Positive SSL	DV	$5.00/yr.	$49.00/yr.	Read More
SSL Web Server	OV	$60.00/yr.	$172.50/yr.	Read More
EV SSL	EV	$49.00/yr.	$78.98/yr.	Read More
Positive SSL Wildcard	DV	$45.00/yr.	$229.00/yr.	Read More
Positive SSL Multi Domain	DV	$21.60/yr.	$165.00/yr.	Read More
Positive SSL Multi-Domain Wildcard	DV	$120.00/yr.	$349.13/yr.	Read more
Multi Domain EV	EV	$390.00/yr.	$933.85/yr.	Read More

So, let us go through the process of installing root and intermediate certificates first.

Adding Root and Intermediate certificate via MMC:

First, open MMC (Microsoft Management Console) by typing mmc in the Run box.

Browse the File menu, click on ‘Add/Remove Snap-in‘ Window.

Now, click on Add button and you will have ‘Add Standalone Snap-in’ window where you double click on Certificates.

Select Computer Account and click Next button.

Select Local Computer and click the Finish button.

Close ‘Add Standalone Snap-in’. Click ‘OK‘ in the ‘Add/Remove Snap-in‘ Window and return to MMC.

Import Root and Intermediate Certificate:

Open MMC and right-click on the Trusted Root Certification Authorities folder found under the Certificates folder, choose All Tasks, and then click on Import.

You will have Certificate Import Wizard, click the Next button.

Browse the Root certificate and click the Next button. When the wizard process completes, click on the Finish button.

Again, Open MMC and right-click on the Intermediate Certification Authorities folder found under the Certificates folder, choose All Tasks, and then click on Import.

You will have Certificate Import Wizard, click the Next button.

Click on the Browse button, find Intermediate files, and click the Next button.

At last, click on the Finish button.

You have now imported Root and Intermediate certificates.

SSL Certificate Installation in IIS 10:

Open IIS Manager with WIN + R key or type inetmgr in the search box. Double click on the Server Certificates icon on the home page of the IIS manager.

Browse the Action panel, click on Complete Certificate Request link.

In the “Specify Certificate Authority Response” window, you should perfume below tasks and then click OK to import the certificate to the storage:
- Filename: Browse the certificate file
- Friendly name: Give a friendly name to locate the certificate easily.
- Select Certificate store: Keep it Personal by default.

You will find a new certificate under the Server Certificate page.

It is time to bind the new certificate to secure port 443. On the left side, expand Sites found in the Connections Panel in the IIS manager. Select websites, return to Actions panel and select Bindings.

You will have a Site Binding window, click on Add button.

In Add Site Binding window, select HTTPS, Select All Unassigned in IP address column, and Select Port as 443. Under the SSL certificates menu, select the certificate specified as a friendly name. Click OK button.

You will have new entry in Site Binding window. Click on Close button.

Your SSL certificate is now installed successfully. You can check with SSL checker to see if the certificate is installed successfully or not.

Related Posts: