How to install a TLS/SSL certificate on Microsoft IIS 10
The instructions below walk you through installing SSL on Microsoft IIS 10 . If you have more than one server or device, you will need to install the certificate on each one you want to protect. If you have not generated your certificate or finished validation yet, see our IIS 10 CSR generation instructions and skip the steps below.
What you will need
1. Your server certificate
This is the certificate the certificate authority issued for your domain. It may have been emailed to you. If not, you can download it from your account dashboard by clicking on your order.
2. Your intermediate certificates
These files let devices connecting to your server identify the issuing certificate authority. There may be more than one of them. If your certificate arrived in a ZIP folder, the intermediates — sometimes called the CA bundle — should be in there too. If not, download the right CA bundle for your certificate.
3. Your private key
This file should be on your server, or in your hands if you generated your CSR with a free generator tool. On some platforms, such as Microsoft IIS, the private key is not immediately visible to you but the server keeps track of it.
Installation instructions
1. Open the server in IIS
Start IIS Manager and click the server name in the Connections menu on the left.
2. Open the Server Certificates manager
On the server's home page, find the IIS section in the middle pane and double-click Server Certificates . The Server Certificates panel opens in the middle pane.
3. Open the Complete Certificate Request wizard
In the Actions menu on the right, click Complete Certificate Request… The Complete Certificate Request wizard opens in a new window.
4. Specify the certificate authority response
- Click the … button to find your certificate on your PC and add it to IIS.
- The friendly name should be something that makes the certificate easy to identify later — the domain name, the certificate authority and the expiry date, for instance "domain.com Sectigo 25/12/2020".
- Finally, choose Personal as the certificate store and click OK to import your certificate.
5. Set the certificate bindings
- Go back to the server's home page in IIS. In the Connections menu on the left, expand Sites and click the site that needs SSL installed.
- On the website's home page, in the Actions menu on the right, find Edit Site and click Bindings… The Site Bindings window opens.
- If this is the first SSL certificate you are installing, click Add to create a new binding. If you are replacing an old certificate, click the existing binding and then Edit .
- In the Add Site Binding window, choose:
- Type: https
- IP address: your site's IP address, or All Unassigned.
- Port: 443
- Host name: not needed for a single-name certificate.
If you are installing more than one certificate, or installing the certificate on more than one website, enter the host name — the domain — you want to protect and tick Require Server Name Indication.
SSL certificate: choose your site's certificate from the drop-down.
With everything set, click OK .
Your certificate should now be installed. Open your site in a browser to check for the padlock, or check it with our SSL Checker.
