Online security is an issue that more and more people care about. In below, we will talk about SSL, one important security protocol for data sent between servers and browsers. We are going to tell readers what is SSL, why we need to install SSL certificates and how to install them in IIS. Check below:
What is SSL
SSL, namely Secure Sockets Layer, is a security technology. It forms an encrypted connection between a server and a browser so that the data transferred between the two objects are safe. In general, a website with SSL certificate has a padlock icon and https:// in the address bar. Moreover, the address bar is green instead of the normal white.
Why to Install SSL Certificates
Generally, the transmitted data is in plain text, making it easy to be attacked and read by hackers. So, ecommerce websites and many websites requiring sensitive information usually have SSL certificates to protect the data in safety during the transferring process from a server to a browser.
How to Install Single SSL Certificate in IIS 8 and IIS 8.5
- Create a Certificate Signing Request
- Submit the CSR to a Certificate Authority
- Get a SSL Certificate from the CA
Then you can start to install a SSL certificate in IIS 8 or IIS 8.5 by following the steps.
Step 1: you will get a Zip file from your CA. This file has a SSL certificate that the CA issued to you. You just need to open the file and save it with your_dommain_name.cer at the desktop of the server you plan to secure.
Step 2: search the Internet Information Service Manager on the Start page and open the manager. Note: if you cannot open the IIS Manager, check whether you turn on the Internet Information Services by following paths: Start→control panel→Programs→Turn Windows feature on or off→Internet Information Services.
Step 3: click the Server Name
Step 4: double-click the Server Certificates icon that is based in IIS icon group on the center menu.
Step 5: click Complete Certificate Request… on the right Action page.
Step 6: by Step 5, you will get a new window, in which there are 3 blanks for you to fill out. The first one is File name containing the certification authority’s response. You can click icon “…” right the blank and find the file stored at the desktop by step 1. Then you need to fill out a friendly name, via which you can easily distinguish your SSL certificate. The last blank is to choose the Personal store to put your new certificate.
Step 7: when you finish the configuration in Step 6, click OK and start the installation of your SSL certificate to the server.
Step 8: then you need to assign this installed SSL certificate to a website using IIS.
Step 9: on the IIS Manager home window, click the server name under the Connections part. And double-click Sites under the server name. Then pick up a website you want to secure with the SSL certificate.
Step 10: Come to the right Actions part. Click Bindings…
Step 11: On the Bindings page, click Add… and you will see another new window called Add Site Binding.
Step 12: On this new window, you will deal with Type, IP address, Port and SSL certificate. You choose https type and input 433 in the Port field. For IP, you can use the IP of the site you want to secure with the SSL or you can just select All Unassigned. Then for SSL certificate blank, you just need to specify the certificate you installed above. Last, click OK.
Now, you have installed your SSL certificate to the IIS web server and configured the certificate with the specified site. If you want to install multiple SSL certificates, check below:
Install Multiple SSL Certificates in IIS 8/8.5
To install multiple SSL certificates in IIS 8/8.5, you can refer to above 12 steps of single SSL certificate installation except step 6. Then come to step 6: for File name and Friendly name fields, you can also refer to above Step 6 of single SSL certificate installation. However, you need to select Web Hosting to store your new certificate.
After finishing the new 12 steps, you have installed the first 1 certificate. To install the second, you have to repeat step 1 to 11 of installing the first certificate. For the last step, you will also fill out the fields of Type, IP address and Port as you fill out before. But this time, you will be required to fill out the Host name and check the box of Require Server Name Indication. Moreover, you need to select your second SSL certificate to SSL certificate field on Add Site Binding window.
The third, the fourth, the fifth… are installed by repeated steps of the second certificate installation.