HOW TO: Install Imported Certificates on a Web Server in Windows 2000 (310178)

SUMMARY

This step-by-step article describes how to import a Web site certificate into the certificate store of the local computer and assign the certificate to the Web site.

back to the top

Install the Certificates

The Windows 2000 Internet Information Server version 5.0 supports Secure Sockets Layer (SSL) communications. An entire Web site, a folder on the Web site, or a particular file that is located in a folder on the site can require a secure SSL connection. However, before the Web server can support SSL sessions, a Web site certificate must be installed.

You can use one of the following methods to install a certificate in IIS 5.0:

• Make an online request by using the IIS Web Server Certificate Wizard and install the certificate at the time of the request.
• Make an offline request by using the IIS Web Server Certificate Wizard and obtain and install the certificate at a later time.
• Request a certificate without using the IIS Web Server Certificate Wizard.

NOTE: If you use the second or third method, you must install the certificate manually.

To install the Web site certificate, follow these steps:

1. Import the certificate into the computer's certificate store.
2. Assign the installed certificate to the Web site.

back to the top

Import the Certificate Into the Local Computer Store

To import the certificate into the local computer store, follow these steps:

1. On the IIS 5.0 Web server, click Start and click Run.
2. In the Run dialog box, type mmc in the Open text box. Click OK.
3. In the Console1 console, click the Console menu and then click Add/Remove snap-in.
4. In the Add/Remove Snap-in dialog box, click Add.
5. In the Add Standalone Snap-in dialog box, click Certificates and click Add.
6. In the Certificates snap-in dialog box, select Computer account and click Next.
7. In the Select Computer dialog box, select Local computer : (the computer this console is running on) and click Finish.
8. In the Add Standalone Snap-in dialog box, click Close.
9. In the Add/Remove Snap-in dialog box, click OK.
10. In the left pane of the console, expand Certificates (Local Computer).
11. Right-click Personal, point to All Tasks, and then click Import.
12. On the Welcome to the Certificate Import Wizard page, click Next.
13. On the File to Import page, click Browse and find the certificate on the floppy disk, local hard disk, or network share on which the certificate is stored. Select the certificate and click Next.
14. If the certificate has a password, type the password on the Password page. Click Next.
15. On the Certificate Store page, select Place all certificates in the following store and ensure that the Certificate Store is set to Personal. If the store is not set to Personal, click Browse and select Personal store. Click Next.
16. Review the settings and click Finish.

back to the top

Assign the Imported Certificate to the Web Site

1. On the IIS 5.0 Web server, start the Internet Services Manager from the Administrative Tools menu.
2. In the Internet Information Services console, expand your server, right-click the Web site to which you want to assign the certificate, and then click Properties.
3. On the Directory Security tab, click Server Certificate.
4. On the Welcome to the Web Certificate Wizard page, click Next.
5. On the Server Certificate page, select Assign an existing certificate and click Next.
6. On the Available Certificates page, select the installed certificate and click Next.
7. On the Certificate Summary page, review the information about the certificate and click Next.
8. On the Completing the Web Server Certificate Wizard page, click Finish.

NOTE: You can configure secure communication with objects on the Web site after the certificate is assigned.

back to the top