Shulou(Shulou.com)06/02 Report--

Publish the https website with IIS, and configure the security service of SSL:

Generate application for certificate request obtain and install intermediate CA certificate install server certificate and configure binding 1. Generate certificate request

Enter the IIS console

On the start menu, click all programs, click attachments, and then click run. In the Open box, type inetmgr, and then click OK. Click the corresponding machine home page, and then select "Server Certificate".

Create a certificate request

Go to the server certificate configuration page, select "create Certificate request", fill in the relevant information, and click "next".

Select the encryption service provider and set the certificate key length. The EV certificate needs to be 2048 bits long, and click "next".

Save the certificate request file to a .txt file (such as applying for a certificate, submitting this document to the relevant authority). Install the server certificate to obtain the certificate

After submitting the application, you will receive an email issued by the certificate and obtain the certificate file in the email. Copy the text containing the server certificate code in the certificate issuing message (including "--BEGIN CERTIFICATE--" and "--END CERTIFICATE--") and paste it into a text editor such as notepad and modify the file name to save as server.cer. Intermediate CA certificate: paste the contents of the two intermediate CA certificates from BEGIN to END (including "--BEGIN CERTIFICATE--" and "--END CERTIFICATE--") in the certificate issuance email into a text editor such as notepad, and modify the file extension to save them as intermediate1.cer and intermediate2.cer files (if your server certificate has only one intermediate certificate, you only need to save and install one intermediate certificate). Install Intermediate CA Certificate

On the start menu, click all programs, click attachments, and then click run. In the Open box, type mmc, and then click OK. Open the console, click File, and then click add / remove snap-ins.

Click Certificate, and then click add.

Select computer account and click next.

Select Local computer and click finish.

Click Certificate (Local computer), select Intermediate Certificate Authority, Certificate.

Right-click in the space, select all tasks, and then click Import.

Import intermediate CA certificates intermediate1.cer and intermediate2.cer respectively through the Certificate Wizard.

Select "put all certificates in the following store", click "next" and click "finish".

Delete a server root certificate (EV)

Select Certificate = > trusted Root Certificate Authority = > Certificate. Check if there is a certificate with the name "VeriSign Class 3 Public Primary Certification Authority-G5" valid from 2006-11-8 to 2036-7-17, and if so, delete the certificate. If the certificate is not found, ignore to continue. Select Certificate = > third Party Root Certificate Authority = > Certificate. Check if there is a certificate with the name "VeriSign Class 3 Public Primary Certification Authority-G5" valid from 2006-11-27 to 2036-7-17, and if so, delete the certificate. 3. Install the server certificate and configure binding to enter the IIS console

On the start menu, click all programs, click attachments, and then click run. In the Open box, type inetmgr, and then click OK. Click the corresponding machine home page, then select "Server Certificate", and then click "complete Certificate request" on the right. Select the certificate file, set the name for the certificate, and complete the import of the certificate.

Configure server certificate

Right-click the site that needs to configure the certificate, and click "Edit binding".

Select "add" and set: type "https" port "443" assign site certificate "mycert" (the name you just filled in), and click "OK".

To this server certificate configuration is complete!

If when installing a server certificate, the server certificate disappears from the list as soon as you refresh it, or if you can't find the server certificate you just installed when editing the binding, you can read a blog and use openssl to generate a .pfx file to solve this problem.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.