The Secure Sockets Layer certificate
(SSL Certificate) is small data files that digitally bind a cryptographic key to an organization’s details. When installed on a web server, it activates the padlock and the HTTPS protocol and allows secure connections from a web server to a browser.
The easiest way to secure your website is by using an SSL certificate and HTTPS. SSL installation involves three general steps, which are as below:
Generating a Certificate Signing Request (CSR)
Purchase of SSL certificate from an SSL vendor
Installation of SSL certificate in the server
See the instructions for generating CSR and processing SSL installation in the IIS server below.
Generate CSR file
Click Start > Administrative Tools > Internet Information Services (IIS) Manager
In the Connections
pane, click the server name
.
In the center pane, double click Server Certificates
under IIS
section.
In the Actions
menu in the right pane, click Create Certificate Request
.
In the Request Certificate
window, provide your information in the Distinguished Name Properties
page and then click Next
.
On the Cryptographic Service Provider Properties
page, select Microsoft RSA SChannel Cryptographic Provider
as the Cryptographic service provider
and 2048
as the Bit length
, and then click Next
.
On the File Name
page, under Specify a file name for the certificate request
, you may specify a file name and save location for your CSR.
Click Finish
once done.
The generated CSR can then be used to order the SSL certificate from a third-party SSL provider.
Install SSL Certificate
Once the SSL provider has issued and provided the certificate, you need to install and configure the SSL certificate in the server where the CSR was generated.
Save the SSL certificate .cer file that you have received from the SSL provider in the server where you generated the CSR.
Click Start > Administrative Tools > Internet Information Services (IIS) Manager.
In the Connections
pane, click on the server name.
In the center pane, double click Server Certificates
under IIS
section.
Click Complete Certificate Request
in the Actions
menu (right pane).
In the Complete Certificate Request
window, on the Specify Certificate Authority Response
page, provide the below information:
- Click
OK
to install the certificate.
Now, that the SSL certificate has been installed on the server, you would need to configure your website to use it.
Configure website to use the installed SSL Certificate
In IIS Manager, in the Connections pane, expand the name of the server, expand Sites
and then click website
you want to secure using the SSL certificate.
In the Actions
menu, click Bindings
.
In the Site Bindings
window, click Add
.
In the Add Site Binding
window, specify the below settings and then click OK.
Type
: Select HTTPS
from the drop-down list
IP address
: From the drop-down list, select the IP address of the website or select All Unassigned
.
Port
: Type 443
(SSL uses port 443 to secure traffic.)
SSL certificate
: From the drop-down list, select the installed SSL certificate.
- Your website is now configured to use the newly installed SSL certificate.
Testing the SSL Certificate Installation
For best results, make sure to close your web browser first and then re-launch it.
Visit your site with the secure HTTPS URL (i.e., go to https://www.example.com, not http://www.example.com).
Related LayerStack Product
Related Tutorials