Windows Server 2016: Create CSR & Install SSL Certificate

Use the DigiCert® Certificate Utility for Windows to create a CSR and install your SSL certificate
on your Windows Server 2016

windows 2016 logo
These instructions explain how to use the DigiCert® Certificate Utility for Windows and IIS 10 to create your CSR, to install your SSL certificate, and to configure your Windows Server 2016 to use the certificate .
DigiCert® Certificate Utility for Windows
For a bare way to create your CSRs ( Certificate Signing Requests ) and install and manage your SSL certificates, we recommend that you use the DigiCert Certificate Utility. For more information about our utility, see DigiCert® Certificate Utility for Windows .
Use the instructions on this page to create your certificate signing request (CSR) and to install and configure your SSL certificate.

If you prefer not to use the DigiCert Utility or for some cause can not use the utility, see iraqi intelligence service 10 : Create CSR and Install SSL Certificate .
 

1. Windows Server 2016: Creating Your CSR with the DigiCert Utility

The DigiCert® Certificate Utility for Windows streamlines the CSR initiation action enabling you to generate the CSR with merely one click .

How to Create Your CSR with the DigiCert Utility

  1. On your Windows Server 2016, download and save the DigiCert® Certificate Utility for Windows feasible ( DigiCertUtil.exe ) .
  2. Run the DigiCert® Certificate Utility for Windows .
    Double-click DigiCertUtil .
  3. In the DigiCert Certificate Utility for Windows©, click SSL ( aureate lock ), and then, chatter Create CSR .
    DigiCert Utility Create CSR
  4. On the Create CSR page, enter the following data :

    Certificate Type: Select SSL.
     
    Common Name: Enter the fully qualified domain name (e.g., www.example.com).
    You may also enter the IP address.
     
    Subject Alternative Names: If you are requesting a Multi-Domain (SAN) Certificate, enter any SANs that you want to include.
    (e.g., www.example.com, www.example2.com, and www.example3.net)
     
    Organization: Enter your company’s legally registered name (e.g., YourCompany, Inc.).
     
    Department: (Optional) Enter the department within your organization that you want to appear on the SSL certificate.
     
    City: Enter the city where your company is legally located.
     
    State: In the drop-down list, select the state where your company is legally located.
    If your company is located outside the USA, you can enter the applicable name in the box.
     
    Country: In the drop-down list, select the country where your company is legally located.
     
    Key Size: In the drop-down list, select 2048.
     
    Provider: In the drop-down list, select Microsoft RSA SChannel Cryptographic Provider,
    unless you have a specific cryptographic provider.

    Enter CSR Details

  5. Click Generate :
  6. On DigiCert Certificate Utility for Windows© – Create CSR page, do one of the come, and then, click Close :

    Click Copy CSR Copies the certificate contents to the clipboard.
    If you use this option, we recommend that you paste the CSR into a tool such as Notepad.
    If you forget and copy some other item, you still have access to the CSR, and don’t have to go back and recreate it.
     
    Click Save to File Saves the CSR as a .txt file to the Windows Server 2016.
    We recommend that you use this option.

    Save or Copy CSR Contents

  7. Use a text editor ( such as Notepad ) to open the file. then, copy the text, including the —–BEGIN NEW CERTIFICATE REQUEST—– and —–END NEW CERTIFICATE REQUEST—– tags, and paste it into the DigiCert order kind .
    cook to order your SSL certificate
    Buy Now
    Learn More
  8. After you receive your SSL certificate from DigiCert, you can use the DigiCert Certificate Utility to install it .

 

2. Windows Server 2016: Using the DigiCert Utility and IIS 10 to Install Your SSL Certificate

windows 2016 logo
If you have not so far created your CSR with the DigiCert Certificate Utility and ordered your SSL certificate, see Windows Server 2016 : Creating Your CSR with the DigiCert Utility .
After DigiCert validates your order and has issues your SSL certificate, you can use the DigiCert® Certificate Utility for Windows, to install the certificate file to your Windows server 2016. then you can use IIS 10 to configure the server to use it .
To install your SSL certificate on your Windows Server 2016, complete the steps below.

  1. Import your SSL certificate to your Windows server 2016 using the DigiCert® Certificate Utility for Windows .
    How to Import Your SSL Certificate Using the DigiCert Certificate Utility
  2. Configure your Windows Server 2016 to use the SSL security using IIS 10 .
    How to Configure the Server to Use Your SSL Certificate Using IIS 10

 

i. How to Import Your SSL Certificate Using the DigiCert Certificate Utility

After DigiCert issues your SSL certificate, you can use the DigiCert Certificate Utility, to install the security charge to your Windows waiter 2016 .
Microsoft Certificate Store Note:
When you use the DigiCert® Certificate Utility for Windows to import/install your SSL certificates on your Windows Server 2016, it will place the certificates in the Personal store alternatively of the Web Hosting memory. If you have less then 20 to 30 certificates, this will not be a trouble .
however, if you are managing 30 or more certificates you will need to move your certificates to the Web Hosting store, which was designed to scale to a greater phone number of certificates. See Move a Certificate from the Personal Store to the Web Hosting Certificate Store .

Importing an SSL Certificate to Your Windows Server 2016

  1. On the Windows Server 2016, where you created the CSR, open the ZIP file containing your SSL security and save the contents of the charge ( for example, your_domain_com.cer ) to the booklet where you saved the DigiCert Certificate Utility feasible ( DigiCertUtil.exe ) .
  2. Run the DigiCert Certificate Utility .
    Double-click DigiCertUtil .
  3. In the DigiCert Certificate Utility for Windows©, click SSL ( gold lock ) and then, click Import .
    Import an SSL Certificate
  4. In the Certificate Import sorcerer, click Browse to browse to the .cer security file ( for example, your_domain_com.cer ) that DigiCert sent you, select the file, click Open, and then, click Next .
    Certificate Import wizard
  5. In the Enter a new friendly name or you can accept the default box, type a friendly name for the security .
    Note: The friendly name is not region of the certificate ; rather, it is used to identify the certificate .
    We recommend that you add DigiCert and the passing date to the end of your friendly name, for example : yoursite-digicert- ( termination date ). This information helps identify the issuer and termination date for each certificate. It besides helps spot multiple certificates with the lapp knowledge domain name .
    Certificate Import wizard
  6. To import the SSL certificate to your server, snap Finish.

  7. You should receive a message that the certificate was successfully imported. You should now see your SSL certificate in the DigiCert Certificate Utility for Windows©
    Import an SSL Certificate
  8. ( Optional ) Repeat the process as needed for each extra SSL certificate .
  9. now that you ‘ve successfully installed your SSL certificate, you need to assign the certificate to the allow site .
    Note: If you are managing 30 or more certificates you will need to move your certificates to the Web Hosting store, which was designed to scale to a greater number of certificates. See Move a Certificate from the Personal Store to the Web Hosting Certificate Store

 

ii. How to Configure the Server to Use Your SSL Certificate Using IIS 10

After importing your SSL security to your Windows Server 2016, you must configure IIS to use the newly imported certificate to secure your web site .

  • (Single Certificate) How to configure the server to use your SSL certificate
  • (Multiple Certificates) How to configure the server to use your SSL certificates using SNI

 

(Single Certificate) How to configure the server to use your SSL certificate

  1. On the Windows Server 2016 where you imported your SSL security with the DigiCert Certificate Utility, candid Internet information Services ( IIS ) Manager .
    In the Windows begin menu, type Internet Information Services (IIS) Manager and open it .
  2. In Internet Information Services (IIS) Manager, in the Connections menu tree ( leave pane ), expand the appoint of the server on which the certificate was installed. then expand Sites and click the site you want to use the SSL certificate to secure .
    IIS 10 Assign SSL Certificate
  3. On the web site Home page, in the Actions menu ( right pane ), under Edit Site, click the Bindings… yoke .
  4. In the Site Bindings window, click Add .
    IIS 10 Assign SSL Certificate
  5. In the Add Site Bindings windowpane, do the play along and then snap OK :

    Type: In the drop-down list, select https.
     
    IP address: In the drop-down list, select the IP address of the site or select All Unassigned.
     
    Port: Type port 443. The port over which traffic is secured by SSL is port 443.
     
    SSL certificate: In the drop-down list, select your new SSL certificate (e.g., yourdomain.com).

    IIS 10 Assign SSL Certificate

  6. Your SSL certificate is now installed, and the web site configured to accept fasten connections .
    IIS 10 Assign SSL Certificate

 

(Multiple Certificates) How to install your SSL certificates and configure the server to use them using SNI

If you have not imported all your SSL certificates, see How to Import Your SSL Certificate Using the DigiCert Certificate Utility .
This teaching explains how to assign multiple SSL certificates using SNI. The process is split into two parts as follows :

  • Assign the First SSL Certificate
  • Assign All Additional Certificates

 

Assign the First SSL Certificate

Do this first gear set of instructions only once, for the beginning SSL certificate .

  1. On the Windows Server 2016 where you imported your SSL certificates with the DigiCert Certificate Utility, open Internet information Services ( IIS ) Manager .
    In the Windows originate menu, type Internet Information Services (IIS) Manager and open it .
  2. In Internet Information Services (IIS) Manager, in the Connections menu tree ( exit pane ), expand the identify of the waiter on which the certificate was installed. then expand Sites and click the locate you want to use the SSL certificate to secure .
    IIS 10 Assign SSL Certificate
  3. On the web site Home page, in the Actions menu ( correct pane ), under Edit Site, click the Bindings… link .
  4. In the Site Bindings window, pawl Add .
    IIS 10 Assign SSL Certificate
  5. In the Add Site Bindings window, do the follow and then click OK :

    Type: In the drop-down list, select https.
     
    IP address: In the drop-down list, select the IP address of the site or select All Unassigned.
     
    Port: Type port 443. The port over which traffic is secure by SSL is port 443.
     
    SSL certificate: In the drop-down list, select your new SSL certificate (e.g., yourdomain.com).

    IIS 10 Assign SSL Certificate

  6. Your first SSL certificate is now assigned, and the web site configured to accept dependable connections .

 

Assign All Additional SSL Certificates

To assign each extra SSL certificate, repeat the steps below, as needed .

  1. In Internet Information Services (IIS) Manager, in the Connections menu corner ( exit acid ), expand the identify of the server on which the certificate was installed. then expand Sites and click the site you want to use the SSL certificate to secure .
    IIS 10 Assign SSL Certificate
  2. On the web site Home page, in the Actions menu ( right pane ), under Edit Site, click the Bindings… radio link .
  3. In the Site Bindings window, snap Add .
    IIS 10 Assign SSL Certificate
  4. In the Add Site Bindings window, do the be and then pawl OK :

    Type: In the drop-down list, select https.
     
    IP address: In the drop-down list, select the IP address of the site or select All Unassigned.
     
    Port: Type port 443. The port over which traffic is secure by SSL is port 443.
     
    Host name: Type the host name that you want to secure.
     
    Require Server After you enter the host name, check this box.
    Name Indication: This is required for all additional certificates/sites, after you’ve installed the first certificate and secured the primary site.
     
    SSL certificate: In the drop-down list, select an additional SSL certificate (e.g., yourdomain2.com).

    IIS 10 Assign SSL Certificate

  5. You have successfully assigned another SSL certificate and configured the web site to accept plug connections .

Test Installation

If your web site is publicly accessible, our DigiCert® SSL Installation Diagnostic Tool can help you diagnose common problems .

reference : https://thefartiste.com
Category : Tech

About admin

I am the owner of the website thefartiste.com, my purpose is to bring all the most useful information to users.

Check Also

articlewriting1

Manage participants in a zoom meeting webinar

Call the people who attend the meet as follows Alternate host host Who scheduled the …

Leave a Reply

Your email address will not be published.