Ask a Question

Solution ID : SO22392

Last Modified : 05/02/2018

Install a GeoTrust True BusinessID with EV / Enterprise SSL with EV certificate in Microsoft IIS 8.0

Problem

This document provides instructions for installing SSL Certificates into IIS 8.0. If unable to use these instructions for your server, please contact Microsoft for further assistance.
 

Solution

To install the certificate in Microsoft IIS 8.0, perform the following steps:
 
Step 1: Download the SSL certificate in PKCS#7 format:
 
Follow the solution below based on the portal the certificate was issued from:
  • GeoTrust Security Center, refer to solution SO22158
  • GeoTrust Enterprise Security Center, refer to solution SO21128
  • GeoTrust User Portal, refer to solution SO15183
     

Step 2: Install the SSL Certificate:

  1. Go to Start > Administrative Tools > Internet Information Services (IIS) Manager
  2. From the left menu, click the corresponding server name
  3. In the Features pane (middle pane), under Security, double-click Server Certificates
  4. From the Actions pane (right pane), select Complete Certificate Request
  5. Provide the location of the certificate file and a friendly name

    NOTE: The Friendly Name is a reference name for quick identification of the certificate for the Administrator
     
  6. Be sure that the Personal store is selected, then click OK



    At this point the server may respond with one of two known error messages referenced below. If no error is reported, proceed to Step 4

    CertEnroll::CX509Enrollment::p_InstallResponse:ASN1 bad tag value met. 0x8009310b (ASN: 267)
    See SO22328 for a resolution to this error.

    or

    Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created.
    See SO21948 for a resolution to this error.


Step 4: Bind SSL certificate to the web site:

  1. From the Connections column on the left, expand the Sites folder
  2. Select the appropriate web site.
  3. From the Actions pane on the right, click on Bindings


     
  4. In the Site Bindings window, If there is no existing https binding, choose Add and change type from HTTP to HTTPS
     

NOTE: If there is an https binding, select it and click Edit


 

  1. From the SSL Certificate drop down, select the friendly name for the SSL certificate that was used during installation


     
  2. Click OK


Step 5:  Verify certificate installation:

  1. To verify the SSL certificate installation, use the  Installation Checker 
     
  2. In some rare cases, a restart of IIS or a reboot of the server may be necessary in order for the changes to take affect.



Additional Notes:

If you do not specify an IP address when installing the SSL Certificate, the same ID will be used for all virtual servers created on the system.
 
If hosting multiple sites on a single server, you can specify that the ID only be used for a particular server IP address

Microsoft Support
 
For more information contact Microsoft.