{"id":94272,"date":"2020-10-21T12:00:25","date_gmt":"2020-10-21T09:00:25","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/what-is-ssl-and-how-to-configure-ssl-certificates-in-iis-for-windows-server-cloudsavvy-it\/"},"modified":"2020-10-21T12:00:25","modified_gmt":"2020-10-21T09:00:25","slug":"what-is-ssl-and-how-to-configure-ssl-certificates-in-iis-for-windows-server-cloudsavvy-it","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/what-is-ssl-and-how-to-configure-ssl-certificates-in-iis-for-windows-server-cloudsavvy-it\/","title":{"rendered":"#What is SSL and How To Configure SSL Certificates in IIS for Windows Server \u2013 CloudSavvy IT"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a373b8461e31\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6a373b8461e31\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/what-is-ssl-and-how-to-configure-ssl-certificates-in-iis-for-windows-server-cloudsavvy-it\/#What_is_an_SSL_Certificate_and_What_Does_it_Do\" >What is an SSL Certificate and What Does it Do?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/buradabiliyorum.com\/en\/what-is-ssl-and-how-to-configure-ssl-certificates-in-iis-for-windows-server-cloudsavvy-it\/#Begin_by_Generating_a_Certificate_Signing_Request\" >Begin by Generating a Certificate Signing Request<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/buradabiliyorum.com\/en\/what-is-ssl-and-how-to-configure-ssl-certificates-in-iis-for-windows-server-cloudsavvy-it\/#Ordering_the_SSL_and_Submitting_Your_CSR_to_the_Certificate_Authority\" >Ordering the SSL and Submitting Your CSR to the Certificate Authority<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/buradabiliyorum.com\/en\/what-is-ssl-and-how-to-configure-ssl-certificates-in-iis-for-windows-server-cloudsavvy-it\/#Installing_your_SSL_Certificate_on_Your_Web_Server\" >Installing your SSL Certificate on Your Web Server<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/buradabiliyorum.com\/en\/what-is-ssl-and-how-to-configure-ssl-certificates-in-iis-for-windows-server-cloudsavvy-it\/#Binding_your_SSL_Certificate_to_Your_Website\" >Binding your SSL Certificate to Your Website<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/buradabiliyorum.com\/en\/what-is-ssl-and-how-to-configure-ssl-certificates-in-iis-for-windows-server-cloudsavvy-it\/#Testing_Your_Certificates_and_Making_Sure_Youre_Secure\" >Testing Your Certificates and Making Sure You\u2019re Secure<\/a><\/li><\/ul><\/nav><\/div>\n<p><strong>&#8220;#What is SSL and How To Configure SSL Certificates in IIS for Windows Server \u2013 CloudSavvy IT&#8221;<\/strong><\/p>\n<div id=\"article-content-area\">\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-7362\" src=\"https:\/\/www.cloudsavvyit.com\/thumbcache\/0\/0\/5ea9233849fa429b17f42871206ab447\/p\/uploads\/2019\/09\/6956a5c5.png\" alt=\"\" width=\"700\" height=\"300\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<p>SSL certificates are a crucial component of the modern web, as they are required for secure HTTPS traffic, protecting your users from attackers in the middle sniffing packets. We\u2019ll show how to request and configure them for Microsoft\u2019s IIS web server.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"What_is_an_SSL_Certificate_and_What_Does_it_Do\"><\/span>What is an SSL Certificate and What Does it Do?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>SSL certificates, which stands for Secure Socket Layer, protect and secure websites all over the world. You can tell when a website has an SSL certificate configured because the URL in the browser shows <em>https:\/\/<\/em> instead of just <em>http:\/\/<\/em>.<\/p>\n<p>When a website has SSL configured properly, it encrypts the data between the web server that hosts the website and your computer or mobile device. This prevents 3rd parties and hackers from intercepting the data and being able to steal your passwords and credit card information. If a website is taking credit cards or passwords from you, most of the time it will have a secure SSL connection, protecting you and your data.<\/p>\n<p>This guide is for inter<a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">media<\/a>te users who have a medium to strong grasp on <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/technology\/\" data-internallinksmanager029f6b8e52c=\"4\" title=\"Technology\" target=\"_blank\" rel=\"noopener\">technology<\/a> but need help specifically installing a certificate in IIS (Internet Information Services) on Windows Server. This guide will walk you through the basic steps needed to get your URL secured with SSL and ready to encrypt connections.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Begin_by_Generating_a_Certificate_Signing_Request\"><\/span>Begin by Generating a Certificate Signing Request<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The first thing you will need to do is generate a certificate signing request from your web server for your website. To do this, open IIS Manager (Internet Information Services) on your web server and navigate to Server Certificates.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-1563\" src=\"https:\/\/www.cloudsavvyit.com\/thumbcache\/0\/0\/82bb2ac71a03389cbc5653b4eba9b2ef\/p\/uploads\/2019\/08\/40ed9cc1-1024x610.png\" alt=\"\" width=\"640\" height=\"381\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<p>On the right-hand side of IIS, select Create Certificate Request and enter in your company information. Anyone can get SSL for their website, so if you do not have a company name, you can just use your legal name or entity. This information is needed to register the website with the SSL authority to try and prevent fraud and false SSL registration.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1565\" src=\"https:\/\/www.cloudsavvyit.com\/thumbcache\/0\/0\/f8e9f7cd10dc1d32924c54b7b5c07626\/p\/uploads\/2019\/08\/4bb71a65.png\" alt=\"\" width=\"669\" height=\"514\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<p>Please be aware that <strong>Common Name<\/strong> should be <em>www.yourdomain.com<\/em> instead of just <em>yourdomain.com<\/em>. If the www is not included in this section, you will only be able to secure <em>yourdomain.com<\/em> and not <em>www.yourdomain.com<\/em>. If the www is included, you are able to secure both.<\/p>\n<p>Once you have filled out this section, click Next to move on.<\/p>\n<p>On the following page, select your Bit Length for encryption, usually 2048, click Next and save your CSR on your desktop as yourdomain.csr.txt as we will be providing this data to a certificate issuer at the next step, so keep it handy!<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Ordering_the_SSL_and_Submitting_Your_CSR_to_the_Certificate_Authority\"><\/span>Ordering the SSL and Submitting Your CSR to the Certificate Authority<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Navigate to your desired certificate authority\u2019s website and begin your SSL order. Many organizations use services like DigiCert, Global Sign, Namecheap, or Verisign to order their certificates and secure their domains. There is also LetsEncrypt, which offers free certificates.<\/p>\n<p>At this point, you will need to provide the contents of the CSR we generated in the last step. You can open this .csr.txt file in Notepad and copy out the CSR data. It will look something like this:<\/p>\n<blockquote>\n<pre>-----BEGIN CERTIFICATE REQUEST-----&#13;\nMIICvDCCAaQCAQAwdzELMAkGA1UEBhMCVVMxDTALBgNVBAgMBFV0YWgxDzANBgNV&#13;\nBAcMBkxpbmRvbjEWMBQGA1UECgwNRGlnaUNlcnQgSW5jLjERMA8GA1UECwwIRGln&#13;\naUNlcnQxHTAbBgNVBAMMFGV4YW1wbGUuZGlnaWNlcnQuY29tMIIBIjANBgkqhkiG&#13;\n9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+To7d+2kPWeBv\/orU3LVbJwDrSQbeKamCmo&#13;\nwp5bqDxIwV20zqRb7APUOKYoVEFFOEQs6T6gImnIolhbiH6m4zgZ\/CPvWBOkZc+c&#13;\n1Po2EmvBz+AD5sBdT5kzGQA6NbWyZGldxRthNLOs1efOhdnWFuhI162qmcflgpiI&#13;\nWDuwq4C9f+YkeJhNn9dF5+owm8cOQmDrV8NNdiTqin8q3qYAHHJRW28glJUCZkTZ&#13;\nwIaSR6crBQ8TbYNE0dc+Caa3DOIkz1EOsHWzTx+n0zKfqcbgXi4DJx+C1bjptYPR&#13;\nBPZL8DAeWuA8ebudVT44yEp82G96\/Ggcf7F33xMxe0yc+Xa6owIDAQABoAAwDQYJ&#13;\nKoZIhvcNAQEFBQADggEBAB0kcrFccSmFDmxox0Ne01UIqSsDqHgL+XmHTXJwre6D&#13;\nhJSZwbvEtOK0G3+dr4Fs11WuUNt5qcLsx5a8uk4G6AKHMzuhLsJ7XZjgmQXGECpY&#13;\nQ4mC3yT3ZoCGpIXbw+iP3lmEEXgaQL0Tx5LFl\/okKbKYwIqNiyKWOMj7ZR\/wxWg\/&#13;\nZDGRs55xuoeLDJ\/ZRFf9bI+IaCUd1YrfYcHIl3G87Av+r49YVwqRDT0VDV7uLgqn&#13;\n29XI1PpVUNCPQGn9p\/eX6Qo7vpDaPybRtA2R7XLKjQaF9oXWeCUqy1hvJac9QFO2&#13;\n97Ob1alpHPoZ7mWiEuJwjBPii6a9M9G30nUo39lBi1w=&#13;\n-----END CERTIFICATE REQUEST-----<\/pre>\n<\/blockquote>\n<p>Copy the contents of your CSR to your order form as requested and follow the instructions on your SSL registrar\u2019s form. Once you complete your orde, <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/download-scripts-themes-apps\/\" data-internallinksmanager029f6b8e52c=\"9\" title=\"Download Scripts &amp; Themes &amp; Apps\" target=\"_blank\" rel=\"noopener\">download<\/a> the .cer they provide to you and save it to your web server.<\/p>\n<p>You are nearly ready to provide secure connections between visitors and your website!<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Installing_your_SSL_Certificate_on_Your_Web_Server\"><\/span>Installing your SSL Certificate on Your Web Server<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>On your server, go back to IIS and Server Certificates and select \u2018Complete Certificate Request\u2019 on the right hand side of IIS Manager.<\/p>\n<p>Upload the new certificate file you just downloaded from the SSL issuer and keep the friendly name the same as your domain or yourdomain.com-01 for simplicity. You can leave the selected ceritficate store as the <em>Personal<\/em> store.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1567\" src=\"https:\/\/www.cloudsavvyit.com\/thumbcache\/0\/0\/6d4d1860276e1f780208b5d38a363025\/p\/uploads\/2019\/08\/840fe184.png\" alt=\"\" width=\"673\" height=\"514\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Binding_your_SSL_Certificate_to_Your_Website\"><\/span>Binding your SSL Certificate to Your Website<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Now that you have you installed your SSL certificate to your sever, you must bind it to your website in order for it to take effect.<\/p>\n<p>To bind it to a website, navigate to your website in IIS and select bindings on the right hand side.<\/p>\n<p>You will need to add a new binding for Type: https, select your SSL certificate from the drop down which you labeled yourdomain.com or yourdomain.com-01. \u2018<\/p>\n<p>For hostname you will want to make it yourdomain.com. After you create this binding you will want to create a second binding for www.yourdomain.com as well so that both versions www and non-www versions of the URL are encrypted.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1569\" src=\"https:\/\/www.cloudsavvyit.com\/thumbcache\/0\/0\/1e2c1b93437d3f36d0d3c9218155fb56\/p\/uploads\/2019\/08\/2934099e.png\" alt=\"\" width=\"642\" height=\"377\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<p>Select OK and your binding should take effect. Now if you want to access your website securely you can go to https:\/\/yourdomain.com to see if the SSL is installed correctly.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Testing_Your_Certificates_and_Making_Sure_Youre_Secure\"><\/span>Testing Your Certificates and Making Sure You\u2019re Secure<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>To make sure SSL is loading correctly for all users, go to an SSL Checker website like https:\/\/www.sslshopper.com\/ssl-checker.html and enter your domain in the form field as https:\/\/yourdomain.com. If it works correctly, it will show you all green checks, otherwise it will tell you exactly what is wrong.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1487\" src=\"https:\/\/www.cloudsavvyit.com\/thumbcache\/0\/0\/41d112e44646cf4fe39502f99d90d630\/p\/uploads\/2019\/08\/e4de0954.png\" alt=\"\" width=\"758\" height=\"372\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<p>If only some of the content is appearing encrypted, you will need to update the URLs for things like images and scripts in your website\u2019s code to have the htttps:\/\/ URL instead of http:\/\/.<\/p>\n<p>Try testing both www and non-www versions of your site for errors.<\/p>\n<p>To force your website to load the secure URL (https) instead of http, you will need to create a redirect rule forcing http to redirect to https for this website.<\/p>\n<p>You are now encrypting sensitive data between your users and your website! This makes your website more credible and safer for everyone on the internet. Thanks for doing your part!\n<\/p><\/div>\n<blockquote>\n<p style=\"text-align: center;\">For forums sites go to <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/forum.buradabiliyorum.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Forum.BuradaBiliyorum.Com<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more like this article, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/technology\/\" target=\"_blank\" rel=\"noopener noreferrer\">Technology category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/www.cloudsavvyit.com\/1486\/what-is-ssl-and-how-to-configure-ssl-certificates-in-iis-for-windows-server\/\" target=\"_blank\" rel=\"noopener noreferrer\">Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8220;#What is SSL and How To Configure SSL Certificates in IIS for Windows Server \u2013 CloudSavvy IT&#8221; SSL certificates are a crucial component of the modern web, as they are required for secure HTTPS traffic, protecting your users from attackers in the middle sniffing packets. We\u2019ll show how to request and configure them for Microsoft\u2019s&#8230;<\/p>\n","protected":false},"author":1,"featured_media":94273,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.cloudsavvyit.com\/p\/uploads\/2019\/09\/6956a5c5.png","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[],"class_list":["post-94272","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/94272","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=94272"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/94272\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/94273"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=94272"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=94272"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=94272"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}