How to add SSL to your Web site

Install Certificate Services

1. Click Start, click Control Panel, and then select Add/Remove Programs.

2. Click Add/Remove Windows components.

3. In the Windows Components Wizard, in the Components list, click Certificate Services.

4. View the text in the message box, and then click Yes.

5. Click Next to start the installation.

6. On the CA Type page, select Standalone root CA, and then click Next.

7. On the CA Identification Information page, in the common name for this CA, type the computer name.

8. In the validity period, change the duration of the certificate to x, and then click Next.

9. On the Certificate Database Settings page, do not make any changes click Next.

A message box appears indicating that IIS must be stopped.

10. In the message box, click Yes.

The Configure Components page appears.

11. If a message box appears and contains information about Active Server page (ASP), click Yes.

12. Click Finish. The Certificate Server installation was successful at this time.

Create a certificate request for a Web site

1. Click "Start," "Administrative Tools," and "Internet Information Services (IIS) Manager" in turn.

2. Expand the computer name (local computer), and then expand Web sites.

3. Right-click your site name, and then click Properties. You can now see that the SSL port is empty.

4. In the properties of your own site name, click the Directory Security tab.

5. Under Secure communications, click Server Certificate.

The WEB Server Certificate Wizard appears. Click "Next".
6. On the Server Certificate page, click New Certificate, and then click Next.

7. On the delay or Immediate Request page, click Next.

8. On the name and security Settings page, do not make any changes click Next.

9. On the Unit Information page, specify the units and department values. For example, enter the company name as the unit, and enter the name of the team or group as the department. Click "Next".

10. On the Site common Name page, do not make any changes click Next.

11. On the Geographic Information page, specify the appropriate information in the country (s), state, and city and county boxes, and then click Next.

12. On the certificate Request file name page, under File name, specify the location where you want to save the certificate request file and the name of the file, and then click Next.

13. Review the information listed on the Request File Summary page, and then click Next.

14. Click Finish.

15. Click OK to exit the Properties dialog box for your site name.

issuing a certificate request using Microsoft Certificate Services

1. Click Start, click Administrative Tools, and then click Certification Authority.

2. In the Explorer pane, right-click the computer name, select All Tasks, and then click Submit a new request.

3. In the Open Request File dialog box, locate the certificate request text file that you created in the previous procedure, and then click Open.

4. In the Explorer pane, expand the computer name, and then click Pending Request.

5. Note the "Request ID" value for the pending request.

6. Right-click the request, select All Tasks, and then click Issue.

7. Under the computer name in the Explorer window, select issued certificates to view the listed certificates and confirm that a certificate has been issued that matches the request ID value for your request.

8. In issued certificates, right-click the issued certificate, select All Tasks, and then click Export Binary Data.

9. In the columns containing binary data, select Binary certificate. Under Export options, select Save binary data to a file, and then click OK.

10. In "Save binary data," Save the file to a directory or other storage device that you specify.

Formatted data file

11. Quit "Certification Authority".

Install a server certificate on your own web site

1. Click "Start," "Administrative Tools," and "Internet Information Services (IIS) Manager" in turn.

2. Expand < computer name > (local Computer), and then expand Web sites.

3. Right-click your own Web site, and then select Properties.

4. In your site properties, click the Directory Security tab.

5. Under Secure communications, click Server Certificate.

The WEB Server Certificate Wizard appears. Click "Next".

6. On the Pending Certificate Request page, select Process pending requests and install certificates, and then click Next.

7. On the Process pending Requests page, click Browse.

8. In the Open dialog box, under File type, select All Files (*.*) from the Drop-down list, and then navigate to the directory where you saved the binary certificate in the previous procedure. Select the binary certificate file, and then click Open.

9. On the Process pending Requests page, click Next.

10. On the SSL Ports page, accept the default value or enter a new value, and then click Next. The default port for SSL connections is 443 (each server certificate has its own different port, if 443 is already occupied, use another port)
11. Review the information on the Certificate Summary page, and then click Next.

12. Click Finish.

13. On the Directory Security tab, under Authentication and access control, click Edit.

14. Set up the Web site HTTPS and require SSL, at this time the site's SSL configuration is complete.

To install a certificate on a client computer
1. Through IE access to their own web site, at this time can be their own web site has been using SSL for protection.

2. Re-enter the URL of your site, structured as follows

https:// Xxxx. Com
3. A dialog box appears that displays a security message. On the security alert, click View Certificate.



4. Installation Certificate

5. Visit your website and view the security certificate