{"id":7462,"date":"2013-03-01T14:43:53","date_gmt":"2013-03-01T19:43:53","guid":{"rendered":"http:\/\/jianmingli.com\/wp\/?p=7462"},"modified":"2015-12-28T23:01:18","modified_gmt":"2015-12-29T04:01:18","slug":"iis-7-ssl-certificate","status":"publish","type":"post","link":"https:\/\/jianmingli.com\/wp\/?p=7462","title":{"rendered":"IIS 7 SSL Certificate"},"content":{"rendered":"
\n

Contents<\/h2>\n
    \n\t
  1. \n\t\tCreate Certificate Request<\/a>\n\t<\/li>\n\t
  2. \n\t\tSign Certificate Request<\/a>\n\t<\/li>\n\t
  3. \n\t\tImport Signed Certificate<\/a>\n\t<\/li>\n\t
  4. \n\t\tAssign Certificate to Web Site<\/a>\n\t<\/li>\n\t
  5. \n\t\tRenew Certificate<\/a>\n\t<\/li>\n\t
  6. \n\t\tReferences<\/a>\n\t<\/li>\n<\/ol>\n<\/ol>\n<\/div>\n
     <\/div>\n

    Create Certificate Request<\/h2><\/span>\n

    * Open IIS Manager
    \n* Select server name, e.g. ADFSSVR1<\/em>
    \n* Double click Server Certificates<\/em><\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    * Select Create Certificate Request…<\/em><\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    * Enter Common Name etc<\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    * Select Cryptographic Service Provider properties<\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    * Specify a file name to save request file, i.e. CSR file name<\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    * Click Finish<\/em><\/p>\n

    Sign Certificate Request<\/h2><\/span>\n

    This example uses AD Certificate Services<\/em> to sign CSR
    \n* Point browser to ADCS, e.g. https:\/\/exchangesvr1\/certsrv\/Default.asp<\/em><\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    * Click Request a certificate<\/em>
    \n* Click advanced certificate request<\/em><\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    * Select Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file <\/em><\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    * Cut and paste CSR file content,
    \n– Certificate Template: Web Server<\/em><\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    * Click Submit<\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    * Click Download certificate<\/em> and save signed certificate file, e.g. adfssvr1.exchange.local.cer<\/em>
    \n* Optionally, download the certificate chain file which contains CA root certificate in addition to the signed certificate.<\/p>\n

    Import Signed Certificate<\/h2><\/span>\n

    * Back to IIS Manager > Server Certificates<\/em>
    \n* Click Complete Certificate Request…<\/em><\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    * Browse to signed certificate file and enter a friendly name, e.g. adfssvr1.exchange.local<\/strong><\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    * Completed:<\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    Assign Certificate to Web Site<\/h2><\/span>\n

    * Back to IIS Manager<\/em>
    \n* Right Default Web Site<\/em> and select Edit Binding…<\/em><\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    * Select https<\/em> Type and click Edit…<\/em>
    \n* Select SSL certificate<\/em><\/p>\n

    \"\"<\/a><\/h6><\/span>\n

    Renew Certificate<\/h2><\/span>\n

    * Alway <\/strong>create a new <\/strong>certificate request
    \n* Do not <\/strong>use Renew<\/em> certificate function of IIS since there is a security bug with the renew function.<\/p>\n

    References<\/h2><\/span>\n

    * Installing an SSL Certificate in Windows Server 2008 (IIS 7.0)<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

    Create Certificate Request * Open IIS Manager * Select server name, e.g. ADFSSVR1 * Double click Server Certificates * Select Create Certificate Request… * Enter Common Name etc * Select Cryptographic Service Provider properties * Specify a file name to … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[6,55],"tags":[145,359],"class_list":["post-7462","post","type-post","status-publish","format-standard","hentry","category-iis","category-ssl","tag-cert","tag-iis-2"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p8cRUO-1Wm","_links":{"self":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/7462","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7462"}],"version-history":[{"count":6,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/7462\/revisions"}],"predecessor-version":[{"id":11201,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/7462\/revisions\/11201"}],"wp:attachment":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7462"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7462"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7462"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}