- Steps to follow
- Step #1: Creating the certification request
- Step #2: Sending the certification request to an authority
- Step #3: Implementing the certificate
- Self-signed certificate
Obtaining an SSL certificate for IIS7 (or later)
Step #1: Creating the certification request To create a certification request: - Open the Internet Information Services Manager ("Start .. Run": Inetmgr.exe).
- Select the current computer (the root of connections).
- Double-click "Server certificates".
- In the screen that is displayed, click the "Create a certificate request" link. A wizard starts.
- Fill the requested information and specify the name of file to generate.
Step #2: Sending the certification request to an authority The certification request must be sent to a certificate authority (for example: www.verisign.com). This example presents the steps to follow to send a certificate request to Verisign. These steps are similar for the other authorities. The different steps are as follows: - In your browser, type: http://www.verisign.com
- Click "Free Trial". This option allows you to get a free certificate valid for 15 days.
- Fill out the short form and click "Submit".
- Follow the certification wizard step by step:
- Step 1 of 5: Generate CSR: Click "Continue".
- Step 2 of 5: Submit CSR: Copy the content of the file that was created beforehand (Step 1) into the input area and click "Continue".
- Step 3 of 5: Complete Application: The content of the certificate is displayed, enter your personal details (Caution: the accented characters are not allowed, the information must be similar to the one found in the certificate content. Example: the area, the company.). Type your email address, the certificate will be sent to this address. Click "Accept".
The certificate will be sent to you within an hour. Step #3: Implementing the certificate The following operations must be performed: - Your certificate is in the email sent by VeriSign.
- Select the part that looks like this.
-----BEGIN CERTIFICATE-----
MIICBzCCAbECEFi+J6vFjN+EkkfCKLgi6uUwDQYJKoZIhvcNAQEEBQAwgakxFjAUBgNVBAoTDVZlcmlTaWduLCB
JbmMxRzBFBgNVBAsTPnd3dy52ZXJpc2lnbi5jb20vcmVwb3NpdG9yeS9UZXN0Q1BTIEluY29ycC4gQnkgUmVmLi
BMaWFiLiBMVEQuMUYwRAYDVQQLEz1Gb3IgVmVyaVNpZ24gYXV0aG9yaXplZCB0ZXN0aW5nIG9ubHkuIE5vIGFzc
3VyYW5jZXMgKEMpVlMxOTk3MB4XDTAwMDkwMTAwMDAwMFoXDTAwMDkxNTIzNTk1OVowZDELMAkGA1UEBhMCRlIx
EjAQBgNVBAgTCUxBTkdVRURPQzEUMBIGA1UEBxQLTU9OVFBFTExJRVIxDDAKBgNVBAoUA1BDUzEPMA0GA1UECxQ
GV0VCREVWMQwwCgYDVQQDFANtcjIwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAmqKCTidFBZEwI0Q7WPTBlQzlac
Qi5nwjNndrWU2tjGMElrY0IxoduwTgRX+DY42IuptGERQApb5NCx/4/3iBrQIDAQABMA0GCSqGSIb3DQEBBAUAA
0EABT7REV9bLiq3EFiug+a/irlbYI7aNiuITsdSVO7j34baFtxaa2jTE4JoGrNhrWTQZgBl1GOMpuMef/MuwXHO
1A==
-----END CERTIFICATE-----
- Copy the selected part into a new file named "Certif.cer" for example.
- Open the Internet Information Services Manager ("Start .. Run": Inetmgr.exe).
- Select the current computer (the root of connections).
- Double-click "Server certificates".
- In the screen that is displayed, click the "End the certificate request" link. A wizard starts.
- Select the file that was just created (Certif.cer) and end the wizard.
IIS 7 can be used to create a self-signed certificate. This option allows you to create a local certificate to check the SSL. To create a self-signed certificate: - Open the Internet Information Services Manager ("Start .. Run": Inetmgr.exe).
- Select the current computer (the root of connections).
- Double-click "Server certificates".
- In the screen that is displayed, click the "Create a self-signed certificate" link. A wizard starts.
|
|
|
|