Generate an Internet Server Certificate (IIS)

Generate an Internet Server Certificate for IIS 6 (Windows XP, 2003) or IIS 7 (Windows Vista, 2008, 7)

Follow the steps below to generate an Internet Server Certificate for IIS 6 (Windows XP, 2003) or IIS 7 (Windows Vista, 2008, 7).

  1. Request and install the Internet Server Certificate
    Note: This step assumes you have already installed IIS on your system. For additional information or if you have not already completed the installation of IIS, please refer to the topic Product Setup before continuing.

    Navigate to the IIS instructions below using the links for your specific version of Windows:

    OS Version Instructions
    Windows XP, 2003 (IIS 6.x) How to enable SSL for your customers
    Windows Vista, 2008, 7 (IIS 7.x) Configuring Internet Server Certificates (IIS 7)

    After you have successfully generated and installed your signed Internet Server Certificate, as well as restarted IIS, go to the following URL to test your SSL setup:

    https://your-host-name/
  2. (Optional) Generate a Self-Signed Certificate
    At this point, you may need to generate a self-signed certificate because:
    • You don't plan on having your certificate signed by a CA
    • Or you wish to test your new SSL implementation while the CA is signing your certificate

    To create and install an IIS self-signed testing certificate, following the instructions below for your specific Windows Operating System:

    OS Version Instructions
    Windows XP, 2003 (IIS 6.x) Download and execute the IIS 6.0 Resource Kit Tools (freely downloadable) from the Microsoft Download Center. Once installed, go to Start menu > All Programs > IIS Resources > SelfSSL and launch SelfSSL. In the SelfSSL command prompt, run the following command:
    > selfssl

    Note that instructions will be listed in the command prompt. Type y when prompted to confirm installation.

    Windows Vista, 2008, 7 (IIS 7.x) See Create a Self-Signed Server Certificate in IIS 7.

    When complete, you can test your self-signed certificate by going to the following URL:

    https://localhost/