Notes Habibzain

Hi dude. Today I will install SSL certificate Windows server 2016. SSL provided by comodo SSL. We can buy SSL via reseller on around world. Fast method with email verification. Just a minute process and get SSL key and certificate in dashboard provider.

This step can also be used on versions of windows server 2008, 2012, 2016 or even 2019. Overall the method is the same.

There are 3 parts of content:

Prequitition install SSL certificate Windows

Before install SSL certificate Windows Server, There are several requirements that must be met.

Generate CSR

First time, before install ssl is generate CSR.

In the Windows start menu, type Internet Information Services (IIS) Manager and open it.
In Internet Information Services (IIS) Manager, in the Connections menu tree (left pane), locate and click the server name.

Double-click Server Certificates. (Red Square).
On the Server Certificates page (center pane), in the Actions menu (right pane), click the Create Certificate Request… link.

In the Request Certificate wizard, on the Distinguished Name Properties page, provide the information specified below and then click Next:

Common name: Type the fully-qualified domain name (FQDN) (e.g., www.example.com).
Organization: Type your company’s legally registered name (e.g., YourCompany, Inc.).
Organizational unit: The name of your department within the organization. Frequently this entry will be listed as “IT”, “Web Security,” or is simply left blank.
City/locality: Type the city where your company is legally located.
State/province: Type the state/province where your company is legally located.
Country: In the drop-down list, select the country where your company is legally located.

On the Cryptographic Service Provider Properties page, provide the information below and then click Next.

Cryptographic service provider: In the drop-down list, select Microsoft RSA SChannel Cryptographic Provider, unless you have a specific cryptographic provider.
Bit length: In the drop-down list select 2048, unless you have a specific reason for opting for larger bit length.

On the File Name page, under Specify a file name for the certificate request, click the … box to browse to a location where you want to save your CSR.

Note: Remember the filename that you choose and the location to which you save your csr.txt file. If you just enter a filename without browsing to a location, your CSR will end up in C:\Windows\System32.

When you are done, click Finish.
Use a text editor (such as Notepad) to open the file. Then, copy the text, including the —–BEGIN NEW CERTIFICATE REQUEST—– and —–END NEW CERTIFICATE REQUEST—– tags, and paste it into the SSL provider order form.

After you receive your SSL certificate from DigiCert, you can install it.

Install and Configure SSL Certificate on Windows Server 2016.

In Internet Information Services (IIS) Manager, in the Connections menu tree (left pane), locate and click the server name.

On the Server Certificates page (center pane), in the Actions menu (right pane), click the Complete Certificate Request.

In the Complete Certificate Request wizard, on the Specify Certificate Authority Response page, do the following and then click OK:

File name containing the certificate authority's response: Click the … box and browse to and select the .cer file (e.g., your_domain_com.cer) that DigiCert sent to you.
Friendly name: Type a friendly name for the certificate. The friendly name is not part of the certificate; instead, it is used to identify the certificate. We recommend that you add DigiCert and the expiration date to the end of your friendly name, for example: yoursite-digicert-(expiration date).
Select a certificate store for the new certificate: In the drop-down list, select PERSONAL.
"PERSONAL": For lightweight scenarios (when you have less than 20-30 certificates)
"Web Hosting": When you have 30+ different certificates, you should use Web Hosting store for performance reasons.

Assign SSL Certificate.

In Internet Information Services (IIS) Manager, in the Connections menu tree (left pane), expand the name of the server on which the certificate was installed. Then expand Sites and click the site you want to use the SSL certificate to secure.
On the website Home page, in the Actions menu (right pane), under Edit Site, click the Bindings… link.
In the Site Bindings window, click Add.
In the Add Site Bindings window, do the following and then click OK:Type:In the drop-down list, select https.IP address:In the drop-down list, select the IP address of the site or select All Unassigned.Port:Type port 443. The port over which traffic is secure by SSL is port 443.SSL certificate:In the drop-down list, select your new SSL certificate (e.g., yourdomain.com).
Your SSL certificate is now installed, and the website configured to accept secure connections.