Obtain server certificates for HTTPS messaging

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To obtain server certificates for HTTPS messaging

  1. On the server requiring a certificate, to request a certificate, open Internet Explorer.

  2. In Internet Explorer, connect to https://servername/certsrv, where servername is the name of the server where the certification authority (CA) you want to access is located.

  3. Click Request a certificate, and then click Advanced certificate request.

  4. To submit a request using a form, click Create and submit a certificate request to this CA, and then click Next.

  5. Fill in any identifying information requested and any other options you require, including:

    • In Name, enter the name of the computer that requires the certificate.

    • In Type of Certificate Needed, choose Server Authentication Certificate.

    • In Key Options, select Use the local machine store.

    • In Key Options, select Marks keys as exportable if you want to export the private key at a later time.

    • Leave other options at default values.

  6. Click Submit.

  7. When you see the Certificate Service Web Page, click Install this certificate to add the certificate to your certificate store.

  8. If you are finished using the Certificate Services Web pages, close Internet Explorer.

  9. After you have the certificate, open Computer Management.

  10. In the console tree, click Default Web Site.

    Where?

    • Computer Management/Services and Applications/Internet Information Services (IIS)/Web Sites
  11. Right-click Default Web Site, and then click Properties.

  12. On the Directory Security tab, click Server Certificate.

  13. In the Web Server Certificate Wizard, do the following:

    • On the Server Certificate page, select Assign an existing certificate.

    • In Available Certificates, select the required certificate, and then click Next.

    • In the SSL Port page, click Next.

    • In Certificate Summary, click Next, and then click Finish.

Note

  • After this procedure is complete, you can view the certificate. To do this, right-click Default Web Site, and then click Properties. On the Directory Security tab, click View Certificate.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Concepts

HTTPS authentication
Working with MMC console files