Install imported certificates - Windows Server (2024)

Table of Contents
In this article Install the Certificates Import the certificate into the local computer store Assign the Imported Certificate to the Web Site Feedback Feedback FAQs

This article describes how to import a Web site certificate into the certificate store of the local computer and assign the certificate to the Web site.

Applies to: Supported versions of Windows Server
Original KB number: 816794

Install the Certificates

The Windows Internet Information Server (IIS)supports Secure Sockets Layer (SSL) communications. A whole Web site, a folder on the Web site, or a particular file that is located in a folder on the site can require a secure SSL connection. However, before the Web server can support SSL sessions, a Web site certificate must be installed.

You can use one of the following methods to install a certificate in IIS:

  • Make an online request by using the IIS Web Server Certificate Wizard and install the certificate at the time of the request.
  • Make an offline request by using the IIS Web Server Certificate Wizard and obtain and install the certificate later.
  • Request a certificate without using the IIS Web Server Certificate Wizard.

Note

See Also
Enabling SSL on your web server—Installation Guides (10.3 and 10.3.1)

If you use the second or third method, you must install the certificate manually.

To install the Web site certificate, you must complete the following tasks:

  • Import the certificate into the computer's certificate store.
  • Assign the installed certificate to the Web site.

Import the certificate into the local computer store

To import the certificate into the local computer store, follow these steps:

  1. On the Web server, select Start, and then select Run.
  2. In the Open box, type mmc, and then select OK.
  3. On the File menu, select Add/Remove snap-in.
  4. In the Add/Remove Snap-in dialog box, select Add.
  5. In the Add Standalone Snap-in dialog box, select Certificates, and then select Add.
  6. In the Certificates snap-in dialog box, select Computer account, and then select Next.
  7. In the Select Computer dialog box, select Local computer: (the computer this console is running on), and then select Finish.
  8. In the Add Standalone Snap-in dialog box, select Close.
  9. In the Add/Remove Snap-in dialog box, select OK.
  10. In the left pane of the console, double-click Certificates (Local Computer).
  11. Right-click Personal, point to All Tasks, and then select Import.
  12. On the Welcome to the Certificate Import Wizard page, select Next.
  13. On the File to Import page, select Browse, locate your certificate file, and then select Next.
  14. If the certificate has a password, type the password on the Password page, and then select Next.
  15. On the Certificate Store page, select Place all certificates in the following store, and then select Next.
  16. Select Finish, and then select OK to confirm that the import was successful.

Assign the Imported Certificate to the Web Site

  1. Select Start, point to Administrative Tools, and then select Internet Information Services (IIS) Manager.
  2. In the left pane, select your server.
  3. In the right pane, double-click Web Sites.
  4. In the right pane, right-click the Web site you want to assign the certificate to, and then select Properties.
  5. Select Directory Security, and then select Server Certificate.
  6. On the Welcome to the Web Certificate Wizard page, select Next.
  7. On the Server Certificate page, select Assign an existing certificate, and then select Next.
  8. On the Available Certificates page, select the installed certificate you want to assign to this Web site, and then select Next.
  9. On the SSL Port page, configure the SSL port number. The default port of 443 is appropriate for most situations.
  10. Select Next.
  11. On the Certificate Summary page, review the information about the certificate, and then select Next.
  12. On the Completing the Web Server Certificate Wizard page, select Finish, and then select OK.

You can now configure Web site elements to use secure communications.

Feedback

Was this page helpful?

Feedback

Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.

Submit and view feedback for

Install imported certificates - Windows Server (2024)

FAQs

How to solve Windows does not have enough information to verify this certificate? ›

Solution 1: Enter Incognito Mode

When you run into the Windows 10 certification error: Windows does not have enough information to verify certificate, you can try turning on Incognito Mode first. In this way, you can find out whether the error is caused by your browser settings or not.

Read On ›
How to install server certificate in Windows Server? ›

In the left pane of the console, double-click Certificates (Local Computer). Right-click Personal, point to All Tasks, and then select Import. On the Welcome to the Certificate Import Wizard page, select Next. On the File to Import page, select Browse, locate your certificate file, and then select Next.

Discover More Details ›
How do I see what certificates are installed on my Windows server? ›

Go to Windows Start > Windows Administrative Tools > Internet Information Services (IIS) Manager. In the Connections panel on the left, click on the server name. Double-click on Server Certificates to display certificates in the IIS Manager.

Continue Reading ›
How to install SSL certificate in Windows Server 2016 without IIS? ›

Importing an SSL Certificate to Your Windows Server 2016

Double-click DigiCertUtil. In the DigiCert Certificate Utility for Windows©, click SSL (gold lock) and then, click Import. In the Certificate Import wizard, click Browse to browse to the . cer certificate file (e.g., your_domain_com.

See Details ›
How to bypass certificate error? ›

Chrome
  1. Right-click the Google Chrome shortcut on your desktop and select Properties.
  2. In the Target field simple append the following parameter after the quoted string: --ignore-certificate-errors.

Find Out More ›
How do I disable certificate validation in Windows server? ›

To disable a certificate, right-click the certificate, click Properties, select Disable all purposes for this certificate, and then click OK.

Tell Me More ›
How to install SSL certificate in Windows Server step by step? ›

Instructions for installing an SSL on Windows Server
  1. Generate a Certificate Signing Request (CSR) This step is for users who have not created a CSR before. ...
  2. Installing SSL Certificate on Windows server. ...
  3. Bind the Certificate to a Website. ...
  4. Confirm SSL Installation.
Sep 10, 2023

Show Me More ›
How to install a certificate in Windows? ›

Procedure
  1. From the Windows Start menu, click Start > Run and enter mmc to open the Microsoft Management Console.
  2. Click File > Add/Remove Snap-in from the Microsoft Management Console.
  3. Click Add.
  4. Select Certificates and click Add.
  5. Select My User Account and click Finish.

Explore More ›
How to install a certificate in Windows using command prompt? ›

Open Command Prompt and type mmc and hit Enter to open MMC. Go to File menu, click Add/Remove Snap In, and add the Certificates snap-in for Local Computer. Once added, right-click in the middle window and select All Tasks > Import. Once imported, the certificate should show up under Local Computer and not Current User.

Continue Reading ›
How to check if a certificate is installed correctly? ›

To be sure that the certificate has been installed correctly and working properly, as well as that your customers are certain a secured connection is enabled and it covers data transmission through your website, you have the following indicators: A padlock/tune icon available in the URL bar.

Show Me More ›

How to check server certificate? ›

Chrome has streamlined the process for users to access a website's certificate details in just a few steps:
  1. Select the padlock icon located in the address bar of the website.
  2. In the pop-up window, choose "Certificate (Valid)."
  3. Review the "Valid from" dates to ensure the SSL certificate is up-to-date.

Read The Full Story ›
Where is CA certificate stored in Windows Server? ›

When you add Certificate Services on a Windows server and configure a CA, a certificate database is created. By default, the database is contained in the %SystemRoot%\System32\Certlog folder, and the name is based on the CA name with an . edb extension.

See Details ›
How do I install and configure an SSL certificate in Windows Server 2016? ›

Assign SSL Certificate
  1. Type: In the drop-down list, select https.
  2. IP address: In the drop-down list, select the IP address of the site or select All Unassigned.
  3. Port: Type port 443. ...
  4. SSL certificate: In the drop-down list, select your new SSL certificate (e.g., yourdomain.com).

Get More Info Here ›
How do I import a certificate into Windows Server 2016? ›

1 Answer
  1. Right-click the Start button and click Run.
  2. Type mmc and hit Enter.
  3. Hit Ctrl + M (or click File -> Add/Remove Snap-in...)
  4. Select Certificates from the Available snap-ins and click Add >
  5. Select Computer account and click Next, then Finish.
  6. Expand Certificates (Local Computer) -> Personal -> Certificates.
Jul 5, 2017

Continue Reading ›
How to install an SSL certificate on a server? ›

Under Install and Manage SSL for your site (HTTPS), click Manage SSL Sites. Scroll down to the Install an SSL Website and click Browse Certificates. Select the certificate that you want to activate and click Use Certificate. This will auto-fill the fields for the certificate.

View More ›
How do you fix a security certificate that Cannot be verified? ›

How to Resolve the Certificate Not Verified Error?
  1. Correct Certificate Name Mismatch.
  2. Change the Outgoing SMTP Port.
  3. Correct the Name of Your Domain.
  4. Utilize the Domain Name of your Hosting as a Mail Server.
  5. Use Insecure Ports.
  6. Utilize Automatic Repair Tool – Remo Outlook PST.

View Details ›
How do I verify a Windows certificate? ›

How To Verify SSL Certificates In Windows? To check if SSL certificate is installed, you can use the Certificate Manager tool and check its validity period. Another alternative option is to use the sigcheck Windows Sysinternals utility to verify TLS version.

See More ›
How do I make a certificate trusted in Windows? ›

Expand Policies > Windows Settings > Security Settings > Public Key Policies. Right-click Trusted Root Certification Authorities and select Import. Click Next and Browse to select the CA certificate you copied to the device. Click Finish and then OK.

Learn More ›
How to fix the Windows error verify that you have sufficient privileges to start system services? ›

In the console tree, navigate to Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment. In the details pane, double-click Log on as a service. Click Add User or Group. Add the account to the list of accounts that have the Log on as a service right.

Discover More Details ›
Top Articles
7 Best Forex Demo Accounts Recommended for Beginners
Frontier Trading - Home
ShaktiMat im Test: Die perfekte 20 Minuten-Entspannung für zu Hause?
Xherdan Shaqiri: Captain, Geburtstagskind, Impfbotschafter
Who is the Youngest NFL Player Ever?
American Football History: Timeline & How it started
Made In Abyss Season 2 Kissanime
Spike Lee Sees the Parallels
What Is an N Battery and What Is it Used for?
Biden concedes debate fumbles but declares he will defend democracy. Dems stick by him — for now
THE 15 BEST Restaurants in Moneta, VA - With Menus, Reviews, Photos - Updated July 2024
How far is Rogers (Arkansas) from Monett - driving distance
Latest Posts
Forget Dogecoin: These Unstoppable Stocks Are Much Smarter Buys | The Motley Fool
Defunct crypto firm FTX loses $1B in client funds
Article information

Author: Clemencia Bogisich Ret

Last Updated:

Views: 5953

Rating: 5 / 5 (80 voted)

Reviews: 95% of readers found this page helpful

Author information

Name: Clemencia Bogisich Ret

Birthday: 2001-07-17

Address: Suite 794 53887 Geri Spring, West Cristentown, KY 54855

Phone: +5934435460663

Job: Central Hospitality Director

Hobby: Yoga, Electronics, Rafting, Lockpicking, Inline skating, Puzzles, scrapbook

Introduction: My name is Clemencia Bogisich Ret, I am a super, outstanding, graceful, friendly, vast, comfortable, agreeable person who loves writing and wants to share my knowledge and understanding with you.