Ask a Question

Advanced Search

Solution ID : SO25647

Last Modified : 05/31/2019

Installation Instructions for Microsoft IIS 8.0 and 8.5


Install Your SSL Certificate Manually

  1. Download your certificate from the unique secure link we provide your technical contact via email.
  2. The ZIP file you download contain the SSL and Intermediate CA certificate in PKCS#7 file (i.e. ssl_certificate.p7b).
  3. Unzip the files onto the server where you will install the certificate.
  4. In Windows, click Start > Administrative Tools > Internet Information Services (IIS) Manager
  5. From the left menu, click the corresponding server name
  6. In the Features pane (middle pane), under Security, double-click Server Certificates
  7. From the Actions pane (right pane), select Complete Certificate Request

    Provide the location of the certificate file and a friendly name

    NOTE: The Friendly Name is a reference name for quick identification of the certificate for the Administrator.
  8. Be sure that the Personal store is selected, then click OK

    At this point the server may respond with one of two known error messages referenced below. If no error is reported, proceed to Step 3

    CertEnroll::CX509Enrollment::p_InstallResponse:ASN1 bad tag value met. 0x8009310b (ASN: 267)
    Click SO26275 for the resolution to this message.


    Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created.
    Click SO21302 for the resolution to this message.

If you are unable to use these instructions for your server, Symantec recommends that you contact either the vendor of your software or an organization that supports Microsoft server.

Binding SSL certificate to the web site

  1. From the Connections column on the left, expand the Sites folder
  2. Select the appropriate web site.
  3. From the Actions pane on the right, click on Bindings

  4. In the Site Bindings window, If there is no existing https binding, choose Add and change Type from HTTP to HTTPS.

    NOTE: If there is an https binding, select it and click Edit

  1. From the SSL Certificate drop down, select the friendly name for the SSL certificate that was used during installation.

  2. Click OK

Additional notes:

If you do not specify an IP address when installing the SSL Certificate, the same ID will be used for all virtual servers created on the system. If hosting multiple sites on a single server, you can specify that the ID only be used for a particular server IP address.


Verify certificate installation

Verify your installation with the DigiCert Installation Checker

For more information, see Microsoft Support website.