Import SHA2 SSL cert to Windows IIS7

Import SHA2 SSL cert to Windows IIS7

1.You would get 3 piece of certs from GeoTrust, and save them to below

1) =server.cert:issue to "*.domain.cn", Issue from "GeoTrust SSL ca-g4"
2) =middle.cer:issue to "GeoTrust SSL ca-g4", Issue from "GeoTrust Global CA"
3) =cross.cer:issue to "GeoTrust Global CA", Issue from "Equifax Secure cerificate Authority"

2. Transter your cert to PFX format

1) Prepare your private key and Server.cert
2) Access https://www.trustasia.com/tools/cert-convert/,
3) Source:pem, TARGET:PKCS12
4) Input Certificate password
5) Save PFX to your PC

3. Import PFX and adjust cert chain

1) Open MMC in the run CMD
2) Click Add/remove snap-in
3) Add Certificate to "selected Snap-ins"
4) Select "Computer account" and push Ok
5) Go to Personal->certificates->right Click and Import new SHA2 PFX file to the server
6) Input Import Password and complete the importing
7) Import Mid.cer and Cross.cer to intermediate certification authority/certificates
8) Verify new personal certificates have 4 level path chain, if still have 3 level path
9) Remove the cert which Issue to "GeoTrust Global CA", Issue from "GeoTrust Global CA"
Now your new personal certificates have 4 level path chain

4. Bind cert to IIS

1) Go to IIS Manager,
2) Select site and right edit bindings
3) Edit HTTPS, select New SSL certificate
4) Restart IIS service

5. Testing

https://www.trustasia.com/tools/ssl-checker/
Mid.cer and Cross.cer are public, so can get it from Trustasia. But server.cer from GeoTrust privately.

Import SHA2 SSL cert to Windows IIS7