Ask a Question

Solution ID : SO15284

Last Modified : 05/18/2018

Install a certificate on Microsoft IIS 7.0

Solution

GeoTrust now offers the GeoTrust SSL Assistant to make it easy to generate a CSR and install a certificate for Microsoft IIS 7.0 servers running .NET 4.5 or higher.
 

Watch GeoTrust's Tutorial Videos for a more visual experience!

Note:  If you are unable to view the video, please click here to go directly to the video source.

 
To install your certificate in Microsoft IIS 7.0, perform the following steps:
 
Step 1 : Download your certificate
 
   1. You will receive an email when your certificate is issued.
   2. You require your certificate in PKCS#7 format, to download it in this format, perform the steps on the following solutions.
 
  • GeoTrust Security Center, refer to solution SO22158
  • GeoTrust Enterprise Security Center, refer to solution SO21128
  • GeoTrust User Portal, refer to solution SO15168
     
 
Step 2 : Install your SSL certificate
 
   1. Click Start > Administrative Tools > Internet Information Services (IIS) Manager
   2. From the left menu, select the corresponding server name



   3. In the Features pane (middle pane), under Security, double-click Server Certificates
   4. From the Actions pane (right pane), select Complete Certificate Request
   5. Provide the location of the certificate file and the friendly name
     
Note: Friendly name is a reference name for quick identification of the certificate for the Administrator

 
WARNING:  When using the PKCS7 formatted cert, and an "ASN1 bad tag value met. 0x8009310b (ASN: 267)" error message is returned during installation, please refer to this article:  SO15608

Note: The following message may also occur;
 
Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created. Please see article: SO16636

Once the above steps have been completed, continue to Step 3.
 
 
Step 3 : Add an HTTPS binding to a Web site

For IIS7, you need to bind the HTTPS protocol to a Web site then assigning the install certificate
 
   1. Click Start > Administrative Tools > Internet Information Services (IIS) Manager
   2. Browse to your server name > Sites > Your SSL-based site
   3. From the Actions pane, choose Bindings



   4. In the Site Bindings window, choose Add
   5. From the Add Site Bindings window, provide the binding type
        Note: Friendly name is a reference name for quick identification of the certificate for the Administrator   
   6. Select the SSL certificate that will be used for this site



   7. Click OK

Step 4:  Verify certificate installation:

To verify the SSL certificate installation, use the Installation Checker

In some rare cases, a restart of IIS or a reboot of the server may be necessary in order for the changes to take affect.