1. Purpose: The purpose of this Standard Operating Procedure (SOP) is to provide a step-by-step guide for installing an SSL certificate and binding it with Internet Information Services (IIS) on a Windows Server. This procedure ensures secure communication between the server and clients by encrypting data transmitted over the network.
2. Scope: This SOP applies to Windows Server operating systems with Internet Information
Services (IIS) installed.
3. Prerequisites:
A valid SSL certificate in .pfx or .cer format.
Access to the Windows Server with administrative privileges.
Internet Information Services (IIS) installed and running.
4. Procedure:
Step 1: Importing the SSL Certificate
a. Copy the SSL certificate file (.pfx or .cer) to the Windows Server.
b. Log in to the Windows Server using an account with administrative privileges.
c. Open the “Microsoft Management Console” by pressing the Windows key + R, then type “mmc” and press Enter.
d. In the MMC window, click “File” and select “Add/Remove Snap-in.”
e. In the “Add or Remove Snap-ins” window, select “Certificates” and click “Add.”
f. Choose “Computer account” and click “Next.”
g. Select “Local computer” and click “Finish” followed by “OK.”
h. Expand “Certificates (Local Computer)” and navigate to “Personal” -> “Certificates.”
i. Right-click on “Certificates” and choose “All Tasks” -> “Import.”
j. Follow the Certificate Import Wizard instructions to import the SSL certificate, providing the certificate path, password, and other required details.
k. Once imported, ensure the SSL certificate appears in the “Certificates” folder under “Personal.”
Step 2: Binding the SSL Certificate with IIS
a. Open the Internet Information Services (IIS) Manager.
b. In the left-hand pane, expand the server node and select the website or application you wish to bind the certificate to.
c. In the middle pane, double-click on “Server Certificates.”
d. Click “Import” in the Actions pane on the right-hand side.
e. Follow the instructions in the Certificate Import Wizard to select the imported SSL certificate.
f. Once imported, go back to the main IIS Manager window.
g. Select the website or application again and double-click on “Bindings” in the middle pane.
h. Click “Add” to add a new binding.
i. In the Add Site Binding window, select the following:
Type: HTTPS
IP address: Select the appropriate IP address or leave it as “All Unassigned.”
Port: 443
SSL certificate: Choose the imported SSL certificate from the drop-down list.
j. Click “OK” to save the binding.
k. Restart the IIS service or restart the server to apply the changes.
5. Verification: To verify the successful installation and binding of the SSL certificate:
a. Open a web browser and access the website or application using the HTTPS protocol (e.g.,https://www.example.com).
b. Ensure the browser displays a padlock icon or a green address bar indicating a secure connection.
c. Verify that no SSL certificate-related errors or warnings are displayed.
6. Revision History: Document Version 1.0 – [Date]: Initial version.
Note: This SOP provides a general procedure for installing an SSL certificate and binding it with IIS on a Windows Server. It’s important to refer to the documentation provided by the certificate authority or consult the Windows Server and IIS documentation for specific instructions based on your server environment.