Below are some examples of how to install a certificate that is created by a certificate issuer. We make no recommendations on who should be used as a certificate issuer and we are not partnered with any issuer.

aboardarmServers

Dec 4, 2013 (3 years and 7 months ago)

101 views

Below are some examples of how to install a certificate that is created by a
certificate issuer. We make no recommendations on who should be used as a
certificate issuer and we are not partnered with any issuer.

For troubleshooting, download the SSL Dia
gnostics Tool from Microsoft:
http://www.microsoft.com/downloads/details.aspx?FamilyID=cabea1d0
-
5a10
-
41bc
-
83d4
-
06c814265282&displaylang=en

Tutorial

Instructions 1

Instructions 2

Instructions 3


--------------------------------------------------------

There is a tutorial on the
installing

here:
http://www
.dewahost.com/tutorials/whmx/installssl.html


Instructions posted at:

http://www.digicert.com/ssl
-
certificate
-
installation
-
microsoft
-
iis
-
5
-
6.htm

How to install you
r SSL Certificate to your Windows 2000/2003 Server

Save just the Bundle Certificate (CertificateBundle.p7b) from your DigiCert Customer
Account to the desktop of the web server you are securing.

1) Install your Certificate:

Go to your Administrative Tools,

and Open the Internet Services Manager.


Right
-
Click on the Default Website and select Properties. Go to the Directory Security
panel. Click

on "Server Certificate..." button. This will start the certificate wizard. Hit
"Next".


Choose to
Process the pending request and install th
e certificate

and click Next.


"Browse" for your SSL Certificate. Make sure to view all file types (Windows only looks
for .cer files by def
ault.) Locate your Bundle Certificate (CertificateBundle.p7b) Click
Next. Follow the rest of the wizard steps until finished.

2) Restart your Server.

*** Note: The installation of your DigiCert Certificate is complete once you have
finished Step 1 (above)
. In most situations IIS will instantly begin using the new
certificate and a restart is not necessary. However, if you notice that the server continues
to use an old certificate or the server will not load https at all then shutdown and restart
the server
.

3) Backup the certificate and private key (Recommended)

It is always good to keep a backup of your certificate and private key incase your server
crashes. You must backup your certificate from your server in order to include a backup
of your private key
. The private key is not included in your certificate files, and the
certificate is not functional without the private key.

To backup your SSL Certificate and private key do the following:

From the
Start menu
, select 'Run...'. Type 'mmc' and hit Enter.


Under the File menu, choose Add/Remove Snap in.


Go to Add, then from the Add Standalone Snap
-
in panel choose Certificates, and click
Add.



Choose
Computer Account

and click Finish.



Close the snap
-
in panel, clicking
OK
.


This should retur
n you to the MMC.

Expand the Personal Folder and view the contents of the Certificates. You will see your
primary certificate listed (this is the Primary Certificate which was installed to the
pending request). Right
-
click your Primary Certificate and choo
se All Tasks, then choose
Export. This opens the Certificate Export Wizard
-

Click Next.

Select the option to 'Yes, export the private key' and hit next. Choose to backup the
certificate to a PKCS 12 (.PFX) file. Select the option to include all Certificat
es in the
Certification Path if possible. Select to enable protection. Do Not select the option to
Delete the Private
-
Key if the export is successful. You will be prompted to choose a
password. Be sure to remember it, as it will be required if you ever nee
d to import the
.pfx file.

This will save a .pfx file
-

Save it to a secure location off of the server.

4) Import the Intermediate Certificate (Not required for most installations)

Because the DigiCert Intermediate Certificate is installed automatically w
hen you install
the Certificate Bundle file (your_domain_name.cer) to your server in Step 1, this step
should not be necessary for most installations. When the certificate is correctly installed
to your server browsers will not display any certificate warn
ings whatsoever. However, if
your clients are getting a warning stating that the certificate was issued by a company that
you have not chosen to trust, then the following procedure will fix that problem.

Download the DigiCertCA.crt Certificate file from i
nside your DigiCert account and save
it to your desktop.

Double
-
click the certificate. This will open the certificate to view.


At the bottom o
f the General tab, click the "Install Certificate..." button. This will start
the certificate import wizard. Click "Next".


Choose to "Place al
l certificates in the following store", and click "Browse".


First, click the "Show physical stores" box, then expand the Intermediate Certific
ation
Authorities folder, select the underlying Local Computer folder, and click ok. Hit "Next",
then "Finish"

Your intermediate certificate is now installed. Restart your server.


Instructions posted at:

http://www.freessl.com/resources/install/chained
ssl/MS_IIS5.html

IIS SSL Instructions

Microsoft IIS 5 and 6
-

Internet Information Services 5
and 6

Installing your SSL Certificate / Web Server Certificate
/ Secure Server Certificate from RapidSSL.com

Firstly when your issuance email arrives you will hav
e two certificates in the email
-

your
server certificate and a chained certificate.


Copy the chained certificate into a text editor such as notepad and save as chain.cer.

Copy your web server certificate into a text editor such as notepad and save as
you
rdomain.cer.

First install the chained certificate as follows:


On your webserver open by the Certificates snap
-
in on the MMC:


1. Click the
Start Button

then select
Run

and type
mmc


2. Click
File

and select
Add/Remove Snap in


3. Select
Add
, select
Certi
ficates

from the
Add Standalone Snap
-
in

box and click
Add


4. Select
Computer Account

and click
Finish


5.
Close

the
Add Standalone Snap
-
in

box, click
OK

in the
Add/Remove Snap
-
in


Return to the MMC:


1.
Expand

the
Certificates

entry in the MMC and right c
lick the
Intermediate
Certification Authorities
, select
All Tasks
, select
Import
.




2. Complete the import wizard, locating the chained certificate (cha
in.cer) when
prompted for the Certificate file to import.

3. Ensure that the chained certificate appears under Intermediate Certification Authorities

Secondly, install your web server certificate:


1. Start IIS and right click
Default Web Site

and select
Properties

from the menu.




2. When the
Properties

appear, click on the
Directory Security

tab.

3. Click on
Server Certificate

and follow the on screen
wizard:



• Ensure that you select
Process the pending request and install the certificate
. Click
Next
.


• Locate the yourdomain.cer file when prompted to locate your webserver certificate.
Click
Next
.


• Review the summary screen and ensure that you

are processing the correct certificate.
Click
Next.


• Click
Next

on the confirmation screen.

4. Make sure that you have assigned Port 443 as the SSL port for https for your site. To
do this, right click Properties for your website and make sure that 44
3 has been entered
into the SSL port box:


You must restart your physical machine for the install to be completed.

Backing up your key pair file

Creating

your Snap
-
in Management Console

Certificate Snap
-
in consoles (MMC) are not preconfigured. You will need to configure
the Snap
-
in before you can perform any Export/Import functionality. To configure your
Snap
-
in, follow the steps below. The system administ
rator will have to create the console.

1.

Go to
Start
. Select
Run
, Type
mmc

and click
OK
. This will bring up an empty
console with no management functionality.


2.

Click on
Console

select
Add/Remove Snap
-
in
.


3.

The Snap
-
ins added to box will list only the Console
Root. Click
Add
.


4.

Select
Certificates

and then click
Add
.


5.

Select
Computer Account
.


6.

Click on
Finish
.


7.

Click
Close
.


8.

Click on
OK
.


Managing your certificates

1.

Go to the
Microsoft Management Console

(MMC) and add the Snap
-
in for
Certificates.


2.

Select the f
olders
Console Root
\
Certificates(Local
Computer)
\
Personal
\
Certificates
.


3.

Right click on the certificate to export.

4.

Select
All Tasks

and
Export
.


5.

The Welcome to the Certificate Manager Import Wizard window opens.

Click
Next
.


6.

Select
Yes, export the private

key
. Click
Next
.

7.

Make sure the Personal Information Exchange
-

PKCS # 12 (.pfx) box is selected.


Warning: Make sure that the "Delete the private key if the export is
successful" is
NOT

checked.


8.

Check the box
Enable strong protection requires IE5.0, NT4.0

SP4 or above
.
Select

Next
.

9.

Check the box to
Include all certificates in the chain
.


10.

Type and confirm your export password.

(Note: this password field can be left blank, but we recommend using a good
password for security)

Warning: If you lose the passwor
d, you must purchase another certificate.


Save

the file to a disk or other form of media. You should choose a form of media that
you would be able to recover if your system has to be rebuilt. Save this file in a secure
location.


*** Microsoft has an aler
t addressing a problem with exporting and importing
certificates.***


Service Pack 2 is intended to correct this problem. There is also a hotfix that may be
obtained from Microsoft that must be run prior to exporting and importing your
certificate. Please

go to the following URL for more information or email us at
support@rapidssl.com
.


http://support.microsoft.com/support/kb/articles/Q
261/6/55.ASP



Instructions 3
: https://certs.godaddy.com/InstallationInstructions_alt.go

Once your SSL certificate has been signed and issued,Go Daddy® will send you an e
-
mail message that allows you to download the signed certificate and our intermediat
e
certificates, all of which must be installed on your Web site.

The specific installation procedure is determined by your choice of Web server software.
Installation instructions are available for the Web servers listed below.

Note:

If your Web server i
s operated by an ISP or hosting service, the provider/service
will install your certificates.

Web Server List

Apache

Microsoft Internet Information Services 4.x

Tomcat 4.x/5.x

Microsoft Internet Information Services
5.0

cPanel/Webhost Manager

Microsoft Internet Information Services 6.0

Plesk

Exchange Server 2007

Mac OS X 10.4

Mac OS X 10.5

If the Web server software you are using is not listed, contact your server software
vendor for installation instructions.