IIS7

This document describes how to install a certificate on an IIS7 server.

Prerequisites

1. The certificate is in the Issued state.
2. You have obtained the certificate package.

   Obtain the certificate file

3. Download the certificate package from the KCM console and decompress the package to obtain the .pfx file and .pem file.
4. Open the .pem file in Notepad, copy the second paragraph (including -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----) to a text file and save it with intermediate.cer as the name.

Install the certificate

The .pfx file contains the server certificate (public key) and private key information. You can directly import the file to IIS. The .cer file is the intermediate CA certificate file and must be imported to the IIS certificate management system.

Import the intermediate CA certificate

To install the intermediate CA certificate for the server certificate:

1. Launch the Run command window and enter mmc to open the MMC console.
2. Choose File > Add/Remove Snap-in.
3. From the Available snap-ins list, choose Certificates and click Add.
4. In the Certificates snap-in dialog box, choose Computer account and click Next.
5. In the Select Computer dialog box, use the default settings, and click Finish.
6. In the Add or Remove Snap-ins dialog box, click OK.
7. In the left pane, choose Console Root > Certificates (Local Computer) > Intermediate Certification Authorities > Certificates.
8. Right-click a blank area of the window and choose All Tasks > Import.
9. Follow the Certificate Import Wizard to import the intermediate certificate .cer file.
10. Select Place all certificates in the following store and click Next. Then, click Finish.

Import the server certificate

1. In the Internet Information Services (IIS) Manager, double-click Server Certificates.
2. Right-click a blank area of the window and choose Import.
3. In the Import Certificate dialog box, enter the password for the .pfx file.
4. Under Connections in the Internet Information Services (IIS) Manager, expand your server name, and then expand Sites.
5. Right-click on a website, and then click Edit Bindings.
6. In the Site Bindings dialog box that appears, click Add.
7. In the Add Site Binding dialog box, add the binding information and then click OK.
8. Restart the IIS website. Use HTTPS to access the website to check whether the certificate has been installed correctly.