Generating a SSL Certificate in Microsoft IIS 4

Installing Primary Server Certificate File with Key Manager

1) Begin first by downloading the following Certificate files from the Web-PKI Customer Account: Root, Intermediate and Primary

2) Next, access the Key Manager

3) Click on the key located in the URL directory at the top, then select “Install Key Certificate” this will allow for the installation of the new IIS Primary SSL Server Certificate.

4) Next, enter the unique Password.

5) When asked, enter the appropriate IP address and Port Number. If this is the only IIS SSL Certificate being installed within the web server, then you may select “Any Assigned” as the option. If there are multiple IIS SSL Certificates being installed, each will require a unique IP Address.

6) Next, select the Computers menu and select “Commit Changes”

7) If the option is not available as prompted in instruction number 6; then close the Key Manager and when prompted to “Commit Changes” select “Yes”

8) After you have selected “Yes” to “Commit Changes” the new IIS Primary SSL Server will have been successfully installed.

9) Once successfully installed, make sure to Back-Up the Key in the Key Manager by following these steps: Select Key Menu, then Export, and finally select Back-Up File.

10) Make sure to Back-Up the file on the hard drive and off the server.

Installing The Intermediate Certificate Files

After installation of the Primary Server Certificate has been successfully completed, restart the computer and run the IIS 4.

ServicePack 3 Instructions:

1. If have the ServicePack 3 on your computer then it is necessary to Install both the Root and Intermediate Certificates using Internet Explorer. This can be accomplished by opening each certificate and select “Install Certificate.”

2. After Step 1 of ServicePack 3 is completed, then use the IIS CA batch file to transfer ALL the Root Certificates from Internet Explorer to IIS Certificate Store.

ServicePack 4 or Later Instructions:

1. In order to open the Installation Wizard: Double-Click the Root Certificate

3. Next, select, “Place all certificates in the following store”

4. Next, click on “Browse”

5. Next, Select the following commands: “Show Physical Stores,” “Trusted Root Certificate Authorities” and “Local Computer.” Once each of those have been selected you will be prompted to Click “OK.”

6. After you have selected “OK” the Wizard will ask you to click “Next” and subsequently “Finish.”

7. After you have completed the steps for the “Root Certificate” you may begin again at Step 1 and utilize those same steps for the “Intermediate Certificate.” The ONLY difference within the steps for the “Root Certificate” and the “Intermediate Certificate” is for the “Intermediate Certificate” when prompted select “Trusted Intermediate Certificate Authorities” instead of “Trusted Root Certificate Authorities” as was required with Installation of the Root Certificate.

8. Make sure for the installation of the “Intermediate Certificate” to place it in the store for “Intermediate Certification Authorities.”

9. After Installation Restart the Server.