SSL Certificates in IIS 7.5
This quick guide will show you how to create a CSR in IIS, purchase the certificate on our site, and install the certificate into your IIS manager.
First, open the IIS Manager and go to the server certificates section.
On the server certificates page, you will see a list of the current certificates on your server. In this example, we see the one that was created by Exchange. The first step in creating an SSL certificate is to create the Certificate Signing Request (CSR) for your certificate. The CSR contains information about the certificate such as the Common Name and company. To start the process, click on Create Certificate Request.
Fill out the CSR information boxes (please note they are all required). In our example, we are creating a CSR for the domain name dyndnsmaps.com. Once the information is all filled in hit Next to continue.
The default values listed here are fine, so hit Next to continue.
Choose a name and location to save the request. You will need to locate this file to continue, so save the file to a location you can easily access. In our example here, the CSR is simply saved to the desktop.
At this point, we're done with IIS for now. Next, we move on to creating and submitting the CSR to DynDNS.com. Visit our site, log into your account, go to the Account Summary page and click on SSL Certificates.
In this example account, we have no previous SSL certificates (otherwise there would be a list of all SSL Certificates that are currently active). To purchase a new certificate, click on Order SSL Certificate.
For the host name field, enter the Common Name for your certificate and then select which SSL certificate product you would like to purchase. For more information on the differences, please review our certificate comparison page. When you're ready to move on click on the continue button.
The next step is to enter your CSR data that you created earlier. To do this you need to locate your CSR, open the file, and then copy and paste all of the text into the entry box on our page (including the ----BEGIN NEW CERTIFICATE REQUEST---- and ----END NEW CERTIFICATE REQUEST---- lines).
The CSR file will be parsed and its information will be displayed on the next page. If anything is wrong, you can resubmit the CSR by clicking on the Replace CSR link. You will also need to choose contacts for the certificate and which email address will receive the approval email. This list cannot be edited; you must select one of the addresses from the list. You can also add alternate Common Names to the certificate for a fee in this step. (Please note you cannot add alternate CNs at a later date; they must be included in the original certificate creation process.)
Once you're done, the order will be placed in your shopping cart. After checkout, an email will be sent to the approver address for you to complete the purchase. Please follow the instructions in the email you will receive. Once the process is complete, you will receive a confirmation email that the certificate is active, and it will be listed as active in your accounts SSL Certificates page.
To view the finished certificate, click on the listed common name for your certificate on the SSL Certificates page in your account.
Click on Download Certificate to proceed and select the top option to view the certificate in your browser.
You will want to select the Server Certificate, then copy the data to your clipboard by pressing CTRL+C or right clicking your selection and choosing Copy.
Paste this information into a text editor, such as Notepad shown in the above screenshot (again including the BEGIN and END lines).
Once the full data is pasted, click File -> Save As. You will want to save the file as a .cer file type, which is done by simply adding the .cer file extension to the file name. Please save the file to an easily-accessible location (in our example, we're saving the file to the Desktop again).
Here we see the server certificate on our desktop below our CSR file.
To install the certificate, go back to the Server Certificates section in the IIS Manager and choose Complete Certificate Request.
Choose the server certificate you just saved and give the certificate a name. Ours will be called My SSL Cert. Click OK to finish the process.
Your SSL Certificate is now listed in your Server Certificates list and can be used for your services.