Certificate Authority – Requesting, Downloading, Installing, and Binding Certificates

Certificate Authority is a server role introduced by Microsoft, to issue digital certificates to target recipients. These digital certificates enable the environment to communicate securely between each other.

This post illustrates on how to :-

1. Request certificate from an internal root CA
2. Download the certificate from internal root CA
3. Install the certificate to server
4. Bind the certificate to HTTPS protocol

However, this post won't explain on how to install internal CA server. you may refer here for that. So let's get started.

Request Certificate From an Internal Root CA

1.  Launch IIS Manager
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
2. Click at the server name. Inside the working space area, locate Server Certificate feature, and double click at it / right click | open feature
   
   
   
   
   
   
   
3. Click at Create Certificate Request...
   
   
   
   
   
   
   
4. Put in all needed info, and click Next
   
   
   
   
   
   
   
5. Select crypto service provider and bit length, click Next
   
   
   
   
   
   
   
6. Specify the location of the certificate request file. In can be in TXT file. Click Finish.
   
   
   
   
   
   
   
7.  CR file can be found at the location stated earlier.
   

Download the Certificate From Internal Root CA

1.  Access to CA web enrollment address
   
   
   
   
   
   
   
   
   
2.  Click at Request a certificate
   
   
   
   
   
   
   
   
   
3.  Click at advanced certificate request.
   
   
   
   
   
   
   
   
4.  Click at Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file.
   
   
   
   
   
   
   
   
   
5.  Open previously created CR file, copy the content...
   
   
   
   
   
   
   
6.  Paste it inside the Saved Request. Change the Certificate Template to SSL template, and click Submit
   
   
   
   
   
   
   
   
7.  Click Yes.
   
   
   
   
   
   
   
8.  Click at Download certificate
   
   
   
   
   
   
   
   
9.  Certificate downloaded.
   
   
   

Install the Certificate To Server

1.  Launch IIS Manager, click at the server name, and open Server Certificates feature
   
   
   
   
   
   
   
2.  At Action column, click at Complete Certificate Request
   
   
   
   
   
   
   
   
3. Locate the cert (*.cer) previously downloaded, provide friendly name (usually I put the server name), and ensure the store is set to Personal. Click OK.
   
   
   
   
   
   
   
4.  Installing...
   
   
   
   
   
   
   
5.  Certificate Installed.
   
   
   

Bind the certificate to HTTPS protocol

1.  Launch IIS Manager, navigate to <serverName> | Sites | Default Web Site (or any different name if applicable).
   
   
   
   
   
   
   
   
   
   
   
2.  At Action column, click at Bindings...
   
   
   
   
   
   
   
   
   
   
   
3. Click at https, and click at Edit...
   
   
   
   
   
   
   
   
   
   
   
4.  Change the SSL certificate to previously installed certificate, then click OK.
   
   
   
   
   
   
   
   
   
   
   
5.  Click Close.
   
   
   
   
   
   
   
   
   
   
   
6.  The server is now good to use HTTPS protocol.