Use the DigiCert® Certificate Utility for Windows to create a CSR and install your SSL certificate
on Windows Server 2008

These instructions explain how to utilize the DigiCert Certificate Utility for Windows with IIS 7 to create your CSR, to install your SSL certificate, and to configure your Windows Server 2008 to utilise the certificate.

DigiCert Document Utility for Windows

For a simpler way to create your CSRs (Document Signing Requests) and install and manage your SSL certificates, we recommend that y'all utilize the DigiCert Certificate Utility. For more than information almost our utility, see DigiCert Certificate Utility.

Utilise the instructions on this page to create your certificate signing request (CSR) and to install and configure your SSL certificate.

  1. To create your CSR, see Windows Server 2008: Creating Your CSR with the DigiCert Utility.

  2. To install your SSL certificate, see Windows Server 2008: Using the DigiCert Utility & IIS 7 to Install and Configure Your SSL Certificate.

If you prefer not to employ the DigiCert Utility, or for some reason cannot apply the utility, see IIS 7: Create CSR and Install SSL Certificate.

Step 1: Create Your CSR on Windows Server 2008 with the DigiCert Utility

The DigiCert Document Utility for Windows streamlines the CSR cosmos procedure by providing easy, one-click CSR creation and certificate installation.

How to Create Your CSR with the DigiCert Utility

  1. On your Windows Server 2008, download and salvage the DigiCert Certificate Utility executable (DigiCertUtil.exe).

  2. Open the DigiCert Certificate Utility (double-click DigiCertUtil).

  3. In the DigiCert Certificate Utility for Windows©, click SSL (gilded lock), and and then, click Create CSR.

    DigiCert Utility Create CSR

  4. On the Create CSR page, provide the following information below and so click Generate.

    Certificate Type: Select SSL.
    Common Name: The fully-qualified domain proper name (FQDN) (eastward.thou., www.instance.com).
    Subject area Alternative Names: If you are requesting a Multi-Domain (SAN) Document, enter any SANs that you want to include
    (e.g., world wide web.instance.com, www.example2.com, and www.example3.net).
    System: Your company's legally registered name (e.thou., YourCompany, Inc.).
    Section: The name of your section inside the organisation. This entry will normally be listed as "Information technology", "Web Security", or is simply left blank.
    City: The urban center where your company is legally located.
    State: Use the drop-downward list to select the state where your visitor is legally located.
    Note: If your company is located outside the Us, you tin type the applicable name in the box.
    State: Utilize the drop-downwards listing to select the country where your visitor is legally located.
    Cardinal Size: In the driblet-downwardly list, select 2048 (unless you lot take a specific reason for using a larger bit length).
    Provider: In the drop-down list, select Microsoft RSA SChannel Cryptographic Provider (unless you lot accept a specific cryptographic provider).

    Enter CSR Details

  5. On DigiCert Document Utility for Windows© - Create CSR page, do one of the following:

    ClickCopy CSR. Copies the certificate contents to the clipboard. Use this option if you are fix to paste the CSR into the DigiCert order class.

    Annotation: Because the DigiCert Certificate Utility does not store CSRs, nosotros recommend you paste the CSR into a text editor (such every bit Notepad) when using this choice. If yous shut the CSR folio and accidentally overwrite the clipboard contents without doing this, you will need to generate a new CSR.

    ClickSave to File. Saves the CSR as a .txt file to the Windows Server 2008. (Nosotros recommend using this option.)

    Save or Copy CSR Contents

  6. Click Close.

  7. If y'all saved the CSR to a file, open the CSR file using a text editor (such as Notepad). Then, copy the text (including the -----BEGIN NEW CERTIFICATE Asking----- and -----Stop NEW Document Request----- tags), and paste information technology into the DigiCert order course.

  8. Subsequently receiving your SSL certificate from DigiCert, you can use the DigiCert Certificate Utility to install information technology.

Footstep 2: Install Your SSL Certificate on Windows Server 2008 Using the DigiCert Utility

If y'all oasis't created your CSR with the DigiCert Certificate Utility and ordered your SSL certificate, run into Windows Server 2008: Creating Your CSR with the DigiCert Utility.

After DigiCert validates your lodge and issues your SSL certificate, you can use the DigiCert Certificate Utility to install the document file to your Windows Server 2008. And then you can use IIS 7 to configure the server to use it.

To install your SSL document on your Windows Server 2008, complete the steps below.

  1. Import your SSL certificate to your Windows Server 2008 using the DigiCert Certificate Utility.

  2. Configure your Windows Server 2008 to use the SSL document using IIS 7.

i. Import Your SSL Document Using the DigiCert Certificate Utility

After DigiCert bug your SSL certificate, you tin use the DigiCert Certificate Utility to install the document file to your Windows Server 2008.

How to Import an SSL Certificate to Your Windows Server 2008

  1. On the Windows 2008 server, where you created the CSR, excerpt the contents of the ZIP file yous received from DigiCert (due east.g., your_domain_com.cer) to the folder where you saved the DigiCert Certificate Utility executable (DigiCertUtil.exe).

  2. Open up the DigiCert Document Utility (double-click DigiCertUtil).

  3. In the DigiCert Document Utility for Windows© , click SSL (gilded lock) and then, click Import.

    Import an SSL Certificate

  4. In the Document Import wizard, click Browse to locate the .cer document file y'all received from DigiCert (e.thou., your_domain_com.cer), and click Open.

    Certificate Import wizard

  5. Click Side by side

  6. In the Enter a new friendly proper name or you can accept the default box, type a friendly name for the certificate.

    Note: The friendly name is not function of the document; instead, information technology is used to identify the certificate. Nosotros recommend that y'all add together the issuing CA (e.g., DigiCert) and the expiration appointment to the stop of your friendly proper noun; for example, yoursite-digicert-(expiration engagement). Doing this helps place the issuer and expiration date for each certificate and as well helps distinguish multiple certificates with the same domain proper noun.

    Certificate Import wizard

  7. To import the SSL document to your server, click Finish.

  8. You should receive a bulletin that the certificate was successfully imported, and you should now encounter your SSL certificate in the DigiCert Certificate Utility for Windows© .

    Import an SSL Certificate

  9. Now that y'all've successfully installed your SSL certificate, you lot need to assign the certificate to the advisable site.

two. Configure the Server to Utilize Your SSL Certificate Using IIS 7

Afterwards importing your SSL certificate to your Windows Server 2008, y'all must configure IIS to use the newly imported certificate to secure your website.

How to configure the server to apply your SSL certificate

  1. On the Windows Server 2008 where you imported your SSL document with the DigiCert Certificate Utility, open Internet Information Services (IIS) Manager (click Start > Administrative Tools > Cyberspace Information Services (IIS) Director).

  2. In Net Information Services (IIS) Manager, in the Connections pane, expand the name of the server on which the certificate was installed. Then expand Sites and click the site you want to secure using the SSL certificate.

  3. In the Actions bill of fare (correct pane), click Bindings.

    IIS 7 Web Site Home Page Bindings

  4. In the Site Bindings window, click Add together.

    IIS 7 Site Bindings Window (Unconfigured)

  5. In the Add Site Binding window, do the following and then click OK.

    Type: In the drib-down listing, select https.
    IP accost: In the drop-down list, select the IP address of the site or select All Unassigned.
    Port: Blazon 443. (SSL uses port 443 to secure traffic.)
    SSL certificate: In the drop-downwards list, select your new SSL document (e.one thousand., yourdomain.com).

    IIS 7 Add Site Bindings Dialog

  6. Your SSL certificate is now installed, and the website is configured to take secure connections.

    IIS 7 Site Bindings Window (Configured)

    7. Note: To enable your SSL certificate for use on other Windows servers, run across PFX export instructions.