Saturday, December 14, 2019

How to Install a Wildcard certificate onto IIS 7.X

To install your Wildcard certificate in Microsoft IIS 7.0, perform the following steps:
Step 1 : Download your certificate
  1. You will receive an email when your certificate is issued.
  2. You will want to download the PKCS#7 format of your certificate.
 
Step 2 : Install your SSL certificate
  1. Click Start > Administrative Tools > Internet Information Services (IIS) Manager
  2. From the left menu, select the corresponding server name
  3. In the Features pane (middle pane), under Security, double-click Server Certificates
  4. From the Actions pane (right pane), select Complete Certificate Request
  5. Provide the location of the certificate file and the friendly name

    Note:  With a Wildcard certificate, you want to make sure to give it a wildcard friendly name. Example: *.domain.com. IIS 7.X will not let you set an SSL host header unless the friendly name starts with * when you start binding your certificate to your sites. You can see in this example how the binding will look later if you do not give the certificate a wildcard friendly name:

    Without wildcard friendly name:

     

    With wildcard friendly name:



Step 3 : Binding certificate to the web site:
  1. Click Start > Administrative Tools > Internet Information Services (IIS) Manager
  2. Browse to your Server Name > Sites > Your SSL-based site
  3. From the Actions pane, choose Bindings
  4. In the Site Bindings window, If there is no existing https binding, choose Add and change Type from HTTP to HTTPS
    Note: if there is already a https binding, select it and click Edit.
  5. From the SSL Certificate drop down, Select the Friendly Name for the SSL certificate that will be used for this site.
    Note: If you don't set a host name, when you try to configure the certificate on another site, it causes an error and the second site won't start.
  6. Click Ok

Step 4 :  Verify certificate installation:
  1. To verify the SSL certificate installation, use the GeoTrust Installation Checker
  2. In some cases you may need to Stop and start your Web server prior to any testing.
    Note: In some cases the changes may not take place after restarting IIS Services and a re-boot is needed.
Additional Notes:
If you do not specify an IP address when installing your SSL Certificate, the same ID will be used for all virtual servers created on the system.
If you are hosting multiple sites on a single server, you can specify that the ID only be used for a particular server IP address.


No comments:

Post a Comment