The Windows 2003 Internet Information Server (IIS) 6.0 supports Secure Sockets Layer (SSL) communications. A whole Web site, a folder on the Web site, or a particular file that is located in a folder on the site can require a secure SSL connection. However, before the Web server can support SSL sessions, a Web site certificate must be installed.
You can use one of the following methods to install a certificate in IIS 6.0:
- Make an online request by using the IIS Web Server Certificate Wizard and install the certificate at the time of the request.
- Make an offline request by using the IIS Web Server Certificate Wizard and obtain and install the certificate later.
- Request a certificate without using the IIS Web Server Certificate Wizard.
Note If you use the second or third method, you must install the certificate manually.
To install the Web site certificate, you must complete the following tasks:
- Import the certificate into the computer's certificate store.
- Assign the installed certificate to the Web site.
Import the Certificate into the Local Computer Store
To import the certificate into the local computer store, follow these steps:
- On the IIS 6.0 Web server, click Start, and then click Run.
- In the Open box, type
mmc, and then click OK. - On the File menu click Add/Remove snap-in.
- In the Add/Remove Snap-in dialog box, click Add.
- In the Add Standalone Snap-in dialog box, click Certificates, and then click
Add. - In the Certificates snap-in dialog box, click Computer account, and then click
Next. - In the Select Computer dialog box, click
Local computer: (the computer this console is running on), and then click Finish. - In the Add Standalone Snap-in dialog box, click Close.
- In the Add/Remove Snap-in dialog box, click OK.
- In the left pane of the console, double-click
Certificates (Local Computer). - Right-click Personal, point to All Tasks, and then click Import.
- On the Welcome to the Certificate Import Wizard page, click Next.
- On the File to Import page, click
Browse, locate your certificate file, and then click
Next. - If the certificate has a password, type the password on the
Password page, and then click
Next. - On the Certificate Store page, click
Place all certificates in the following store, and then click
Next. - Click Finish, and then click
OK to confirm that the import was successful.
Assign the Imported Certificate to the Web Site
- Click Start, point to
Administrative Tools, and then click Internet Information Services (IIS) Manager. - In the left pane, click your server.
- In the right pane, double-click Web Sites.
- In the right pane, right-click the Web site you want to assign the certificate to, and then click
Properties. - Click Directory Security, and then click
Server Certificate. - On the Welcome to the Web Certificate Wizard page, click Next.
- On the Server Certificate page, click
Assign an existing certificate, and then click
Next. - On the Available Certificates page, click the installed certificate you want to assign to this Web site, and then click
Next. - On the SSL Port page, configure the SSL port number. The default port of 443 is appropriate for most situations.
- Click Next.
- On the Certificate Summary page, review the information about the certificate, and then click
Next. - On the Completing the Web Server Certificate Wizard page, click Finish, and then click
OK.
You can now configure Web site elements to use secure communications.
For more information on installing SSL, please check with CA's website: