Installing an SSL certificate on Microsoft IIS 5.x / 6.x

Part one: Download and save certificates

Root and Intermediate certificates link the certificate for your domain name to its original certification authority. In order for visitors' browsers to recognize your certificate and the security it provides, you must install the Root and Intermediate certificates as well as the certificate for your domain name.

1. Open the email we sent you, that contains the certificate for your domain name.

2. Copy the certificate, including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines.

3. Paste the certificate into a blank document in a text editor. Use an editor that will not add characters, such as TextPad.

4. Save the document. We recommend that you name it YourDomainName.crt and save it in your Web server's default directory for SSL certificates.

   We recommend that you also back up your certificate on another computer or storage device.

5. Confirm which certificate you purchased, and determine which set of Root and Intermediate certificates to download.

   To confirm which certificate you purchased, review your order confirmation.

   • If you purchased SBS Instant, download set A below.

   • If you purchased SBS Secure or Secure Plus, download set B below.

   A -- SBS Instant

   • Instant Validation SBS Intermediate 2 CA
   • Instant Validation AddTrust Intermediate 1 CA
   • Instant Validation UTN Global Root CA

   -OR-

   B -- SBS Secure and Secure Plus

   • Full Validation Root CA
   • Full Validation Intermediate CA

6. Download the Root-Intermediate set for your domain name certificate. To download, right-click each certificate file name and select Save Target As.

   Save the Root and Intermediate certificates to the same directory where you saved the certificate for your domain name.

Part two: Install the Root and Intermediate certificates

1. In your Windows taskbar, click the Start button then select Run, type mmc, and click OK.
2. Click File and select Add/Remove Snap in.
3. Select Add, select Certificates from the Add Standalone Snap-in box and click Add.
4. Select Computer Account and click Next. (This step is important: You must select Computer Account, not the current user account.)
5. Select Local computer and then Finish.
6. Close the Add Standalone Snap-in box, click OK in the Add/Remove Snap-in.
7. Return to the MMC.

8. To install the Root certificate, right-click Trusted Root Certification Authorities, select All Tasks, select Import.

   

9. Click Next.

   

10. Locate your Root certificate and click Next.

    

11. Select Place all the certificates in the following store and click Next.
12. When the wizard is completed, click Finish.

13. To install your Intermediate certificates, right-click Intermediate Certification Authorities, select All Tasks, select Import.

    

14. If you purchased SBS Instant, install *Intermediate1CA.crt and then *Intermediate2CA.crt. If you purchased SBS Secure or Secure Plus, install *Intermediate*.crt. All the Intermediate files associated with your certificate must be installed.
15. Confirm that the Root certificate appears under Trusted Root Certification Authorities.
16. Confirm that the Intermediate certificate(s) appear under Intermediate Certification Authorities.
17. Restart the server.

Part three: Install the certificate for your domain name

1. Select Administrative Tools.

2. Start Internet Services Manager.

3. Open the properties window for the website. You can do this by right-clicking Default Web Site and selecting Properties from the menu.

   

4. Open Directory Security by clicking the Directory Security tab.

   

5. Click Server Certificate. The following Wizard will appear:

   

6. Select Process the pending request and install the certificate, and click Next.
7. Enter the location of your IIS SSL certificate (you may also browse to locate your IIS SSL certificate), and click Next.
8. Read the summary screen to be sure that you are processing the correct certificate, and then click Next.

9. You will see a confirmation screen. When you have read this information, click Next.

You now have an IIS SSL server certificate installed.

Important: You must restart the computer to complete the install.

You may want to test the Web site to ensure that everything is working correctly.