Kaki Supper

After received SSL Certificate from the provider, you will need to install it to the server from which the CSR key request was generated. The following is the steps for SSL Installation at Microsoft IIS7:

1. Copy or download the SSL certificate file (*.cer)  to the web server that you wish to secure.
2. Click on Start menu, then Administrative Tools, then Internet Information Services (IIS) Manager.
3. Click on the server name.
4. From the center menu, double-click the “Server Certificates” button in the “Security” category (near the bottom of the menu with view by group).
   
5. From the “Actions” menu (at the right panel), click on “Complete Certificate Request.” This will open the Complete Certificate Request wizard.
   
6. Browse to your *.cer file that was provided to you by SSL certificate provider.  You will then be required to enter a friendly name. The friendly name is not part of the certificate itself, but is used by the server administrator to easily distinguish the certificate.
7. Clicking “OK” will install the certificate to the server. Note: There is a known issue in IIS 7 giving the following ERROR: “Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created.” You may also receive a message stating “ASN1 bad tag value met”. If this is the same server that you generated the CSR on then, in most cases, the certificate is actually installed.  Simply cancel the dialog and press “F5″ to refresh the list of server certificates.  If the new certificate is now in the list, you can continue with the next step. If it is not in the list, you will need to reissue your certificate using a new CSR (see our CSR creation instructions for IIS 7).  After creating a new CSR, login to your account at provider control panel and click the reissue button for your new SSL certificate.
   
8. Once the SSL certificate has been successfully installed to the server, you will need to assign that certificate to the appropriate website at IIS.

1. Click Start menu, then Administrative Tools, then Internet Information Services (IIS) Manager.
2. Click on the “Server name”.
3. From the center menu, double-click the “Server Certificates” button in the “Security“ category (it is near to the bottom of the menu if view by group).
   
4. Next, from the “Actions” menu (on the right), click on “Create Certificate Request.“  This will open the Request Certificate wizard.
   
5. In the “Distinguished Name Properties” window, enter the information as follows:
   Common Name - The name through which the certificate will be accessed (usually the fully-qualified domain name, e.g., www.domain.com or mail.domain.com).
   Organization – The legally registered name of your organization/company.
   Organizational unit – The name of your department within the organization (frequently this entry will be listed as “IT,” “Web Security,” or is simply left blank).
   City/locality – The city in which your organization is located.
   State/province – The state in which your organization is located.
   Country/region – If needed, you can find your two-digit country code in our list.
6. Click Next. In the “Cryptographic Service Provider Properties” window, leave both settings at their defaults (Microsoft RSA SChannel and 2048) and then click next.
   
7. Enter a Filename for your CSR file.

NOTE: Remember the filename that you choose and the location to which you save it. You will need to open this text file in NotePad and copy the entire body of it (including the Begin and End Certificate Request tags) when order for new SSL certificate.

1. Go to Start > Run
2. Type in MMC and click OK
3. Click the File menu at top > select Add/Remove Snap-in
4. Click on Certificates and click on Add.
5. Select Computer Account > Click Next
6. Select Local Computer > Click Finish
7. Click OK to close.
8. Double click on Certificates (Local Computer) in the center window.
9. Right click on the Personal Certificates Store (folder)
   Choose > ALL TASKS > Import
10. Follow the Certificate Import Wizard to import your Primary Certificate from the .pfx file.  You will need to Browse for .pfx files.
11. Enter the password that was used when exporting the certificate to a .pfx file.
12. If desired, check the box to “Mark this key as exportable.”
13. When prompted, choose to automatically place the certificates in the certificate stores based on the type of the certificate.
14. Click Finish to end the wizard.
15. Close the MMC console.  In the case that you are prompted, it is not necessary to save the changes made to the MMC console.

1. Go to Windows menu: Start > Run
2. Type in MMC and click OK
   
3. Click the File Menu > select Add/Remove Snap-in
   
4. Click on Certificates and click on Add.
5. Select Computer Account > Click Next
   
6. Select Local Computer > Click Finish
   
7. Click OK to close.
8. Double click on Certificates (Local Computer) in the center window.
9. Double click on the Personal folder, and then on Certificates.
10. Right Click on the Certificate you would like to backup and choose > ALL TASKS > Export
11. Follow the Certificate Export Wizard to backup your certificate.
12. Choose to “Yes, export the private key”
    
13. Choose to “Include all certificates in certificate path if possible.”
    Note: Do NOT select the delete Private Key option
    
14. Enter a password you will remember
15. Choose the save location and name the *.pfx file
16. Finish
17. You will receive a message > “The export was successful.” > Click OK
18. DONE!