Creating a CSR and installing your SSL document on your Windows server 2022

Use the instructions on this folio to use IIS 10 to create your certificate signing request (CSR) then to install your SSL document on your Windows server 2022.

  1. To create your certificate signing asking (CSR), see IIS 10: How to Create Your CSR on Windows Server 2022.

  2. To install your SSL certificate, come across IIS ten: How to Install and Configure Your SSL Certificate on Windows Server 2022.

If you are looking for a simpler way to create CSRs, and install and manage your SSL Certificates, nosotros recommend using the DigiCert® Certificate Utility for Windows. You can use the DigiCert Utility to generate your CSR and install your SSL document. See Windows Server 2022: Create CSR & Install SSL Certificate with DigiCert Utility.

i. IIS 10: How to Create Your CSR on Windows Server 2022

Using IIS 10 to Create Your CSR

  1. In the Windows start carte du jour, type Internet Information Services (IIS) Manager and open it.

  2. In Internet Information Services (IIS) Manager, in the Connections menu tree (left pane), locate and click the server proper noun.

    IIS 10 Create CSR

  3. On the server name Home folio (center pane), in the IIS section, double-click Server Certificates.

  4. On the Server Certificates page (center pane), in the Actions carte du jour (right pane), click the Create Document Request… link.

    IIS 10 Create CSR

  5. In the Request Certificate wizard, on the Distinguished Name Properties page, provide the information specified below and then click Next:

    Common proper noun: Type the fully-qualified domain name (FQDN) (e.g., www.example.com).
    Organization: Type your visitor's legally registered name (eastward.g., YourCompany, Inc.).
    Organizational unit of measurement: The proper name of your department within the organisation. Frequently this entry will be listed as "It", "Web Security,"
    or is simply left blank.
    Urban center/locality: Blazon the urban center where your company is legally located.
    Land/province: Type the country/province where your company is legally located.
    Country: In the drop-downwards list, select the land where your company is legally located.

    IIS 10 Add CSR Details

  6. On the Cryptographic Service Provider Properties page, provide the information below and so click Next.

    Cryptographic In the drop-down listing, selectMicrosoft RSA SChannel Cryptographic Provider,
    service provider: unless yous take a specific cryptographic provider.
    Bit length: In the drop-down list select 2048, unless yous take a specific reason
    for opting for larger bit length.

    IIS 10 Add CSR Details

  7. On the File Proper noun page, under Specify a file name for the certificate asking, click the … box to browse to a location where you want to save your CSR.

    Note: Call back the filename that you choose and the location to which you save your csr.txt file. If yous just enter a filename without browsing to a location, your CSR will end up in C:\Windows\System32.

    IIS 10 Add CSR Details

  8. When you lot are done, click Finish.

  9. Use a text editor (such as Notepad) to open up the file. And then, copy the text, including the -----Begin NEW Document REQUEST-----  and -----End NEW CERTIFICATE Asking-----  tags, and paste it into the DigiCert order form.

    IIS 10 Add CSR Details

  10. After you receive your SSL document from DigiCert, you can install it.

2. IIS 10: How to Install and Configure Your SSL Document on Windows Server 2022

If you have not withal created a CSR and ordered your certificate, meet IIS ten: How to Create Your CSR Windows Server 2022.

After we validate and issue your SSL document, yous demand to install it on the Windows 2022 server where the CSR was generated. Then, you lot need to configure the server to use information technology.

  • (Single Certificate) How to install and configure your SSL certificate
  • (Multiple Certificates) How to install and configure your SSL certificates using SNI

(Single Certificate) How to install your SSL certificate and configure the server to use it

Install SSL Certificate

  1. On the server where you created the CSR, save the SSL certificate .cer file (e.g., your_domain_com.cer) that DigiCert sent to you.

  2. In the Windows starting time menu, type Internet Data Services (IIS) Manager and open it.

  3. In Internet Information Services (IIS) Manager, in the Connections menu tree (left pane), locate and click the server name.

    IIS 10 Install SSL Certificate

  4. On the server proper noun Home page (center pane), in the IIS section, double-click Server Certificates.

  5. On the Server Certificates page (center pane), in the Actions menu (right pane), click the Consummate Certificate Request… link.

    IIS 10 Install SSL Certificate

  6. In the Complete Certificate Request magician, on the Specify Certificate Authority Response page, exercise the following and then click OK:

    File name containing the Click the … box and scan to and select the .cer file
    document authority's response: (eastward.m.,your_domain_com.cer) that DigiCert sent to you.
    Friendly name: Type a friendly name for the certificate.
    The friendly proper noun is not office of the document; instead, it is used to identify the document.
    We recommend that yous add DigiCert and the expiration date to the end of your friendly name, for example: yoursite-digicert-(expiration date).
    This data helps identify the issuer and expiration date for each certificate. It besides helps distinguish multiple certificates with the same domain proper noun.
    Select a certificate shop In the drib-downwards list, select Web Hosting.
    for the new document:

    IIS 10 Install SSL Certificate

  7. At present that you've successfully installed your SSL document, you demand to assign the certificate to the advisable site.

    8. Assign SSL Certificate

  8. In Internet Data Services (IIS) Manager, in the Connections menu tree (left pane), aggrandize the name of the server on which the certificate was installed. Then aggrandize Sites and click the site you want to use the SSL certificate to secure.

    IIS 10 Assign SSL Certificate

  9. On the website Dwelling page, in the Deportment menu (right pane), under Edit Site, click the Bindings… link.

  10. In the Site Bindings window, click Add.

    IIS 10 Assign SSL Certificate

  11. In the Add Site Bindings window, exercise the following and then click OK:

    Type: In the drib-downwards listing, select https.
    IP address: In the drop-downwards list, select the IP accost of the site or select All Unassigned.
    Port: Type port 443 . The port over which traffic is secure past SSL is port 443.
    SSL document: In the drop-downward list, select your new SSL certificate (e.grand., yourdomain.com).

    IIS 10 Assign SSL Certificate

  12. Your SSL document is now installed, and the website configured to accept secure connections.

    IIS 10 Assign SSL Certificate

(Multiple Certificates) How to install your SSL certificates and configure the server to use them using SNI

This instructions explains how to install multiple SSL certificates and assign them using SNI. The process is split into two parts equally follows:

  • Installing and Configuring Your Kickoff SSL Certificate

  • Installing and Configuring All Additional Certificates

Install Offset SSL Certificate

Do this first set up of instructions only in one case, for the showtime SSL certificate.

  1. On the server where you created the CSR, salvage the SSL document .cer file (e.m., your_domain_com.cer) that DigiCert sent to you.

  2. In the Windows start menu, type Cyberspace Data Services (IIS) Manager and open it.

  3. In Internet Data Services (IIS) Manager, in the Connections card tree (left pane), locate and click the server proper name.

    IIS 10 Install SSL Certificate

  4. On the server name Home page (center pane), in the IIS section, double-click Server Certificates.

  5. On the Server Certificates page (eye pane), in the Actions menu (right pane), click the Complete Certificate Request… link.

    IIS 10 Install SSL Certificate

  6. In the Complete Certificate Request wizard, on the Specify Certificate Authority Response page, do the post-obit and then click OK:

    File name containing the Click the … box and browse to and select the .cer file
    certificate authority's response: (eastward.g.,your_domain_com.cer) that DigiCert sent to you lot.
    Friendly proper noun: Type a friendly proper name for the certificate.
    The friendly proper name is not role of the certificate; instead, it is used to identify the document.
    We recommend that yous add DigiCert and the expiration date to the end of your friendly name, for instance: yoursite-digicert-(expiration date).
    This information helps place the issuer and expiration date for each document. Information technology besides helps distinguish multiple certificates with the aforementioned domain name.
    Select a certificate shop In the drop-down list, select Web Hosting.
    for the new certificate:

    IIS 10 Install SSL Certificate

  7. Now that you've successfully installed your SSL certificate, you need to assign the certificate to the appropriate site.

  8. In Net Information Services (IIS) Manager, in the Connections card tree (left pane), expand the name of the server on which the certificate was installed. Then expand Sites and click the site you desire to apply the SSL certificate to secure.

    IIS 10 Assign SSL Certificate

  9. On the website Home folio, in the Deportment carte (correct pane), under Edit Site, click the Bindings… link.

  10. In the Site Bindings window, click Add.

    IIS 10 Assign SSL Certificate

  11. In the Add Site Bindings window, do the following and then click OK:

    Type: In the drop-down list, select https.
    IP address: In the drop-down list, select the IP address of the site or select All Unassigned.
    Port: Type port 443 . The port over which traffic is secure past SSL is port 443.
    SSL certificate: In the drib-downward list, select your new SSL certificate (east.g., yourdomain.com).

    IIS 10 Assign SSL Certificate

  12. Your beginning SSL certificate is now installed, and the website configured to accept secure connections.

Install Additional SSL Certificates

To install and assign each additional SSL document, repeat the steps beneath, every bit needed.

  1. On the server where you created the CSR, relieve the SSL certificate .cer file (e.g., your_domain_com.cer) that DigiCert sent to you.

  2. In the Windows start menu, type Internet Information Services (IIS) Managing director and open it.

  3. In Cyberspace Information Services (IIS) Manager, in the Connections bill of fare tree (left pane), locate and click the server name.

    IIS 10 Install SSL Certificate

  4. On the server proper noun Domicile page (center pane), in the IIS section, double-click Server Certificates.

  5. On the Server Certificates page (heart pane), in the Actions menu (right pane), click the Complete Certificate Request… link.

    IIS 10 Install SSL Certificate

  6. In the Consummate Certificate Request wizard, on the Specify Document Authority Response page, do the post-obit and then click OK:

    File name containing the Click the … box and browse to and select the .cer file
    certificate potency'south response: (e.g.,your_domain_com.cer) that DigiCert sent to you.
    Friendly name: Blazon a friendly proper noun for the document.
    The friendly proper name is non part of the certificate; instead, information technology is used to place the certificate.
    Nosotros recommend that you lot add together DigiCert and the expiration date to the end of your friendly name, for instance: yoursite-digicert-(expiration engagement).
    This data helps identify the issuer and expiration date for each certificate. It as well helps distinguish multiple certificates with the same domain name.
    Select a document shop In the drop-down listing, select Web Hosting.
    for the new certificate:

    IIS 10 Install SSL Certificate

  7. Now that you've successfully installed your SSL certificate, you demand to assign the certificate to the appropriate site.

  8. In Internet Information Services (IIS) Manager, in the Connections menu tree (left pane), expand the name of the server on which the certificate was installed. Then aggrandize Sites and click the site you want to use the SSL document to secure.

    IIS 10 Assign SSL Certificate

  9. On the website Home page, in the Actions carte (correct pane), nether Edit Site, click the Bindings… link.

  10. In the Site Bindings window, click Add together.

    IIS 10 Assign SSL Certificate

  11. In the Add Site Bindings window, exercise the following and so click OK:

    Blazon: In the drop-downwardly list, select https.
    IP address: In the driblet-down list, select the IP accost of the site or select All Unassigned.
    Port: Type port 443 . The port over which traffic is secure by SSL is port 443.
    Host proper name: Blazon the host name that yous want to secure.
    Require Server Later you enter the host name, check this box.
    Proper name Indication: This is required for all boosted certificates/sites, subsequently you've installed the first certificate and secured the primary site.
    SSL certificate: In the drop-down listing, select an additional SSL certificate (due east.g., yourdomain2.com).

    IIS 10 Assign SSL Certificate

  12. You have successfully installed some other SSL document and configured the website to accept secure connections.