Import a server authentication certificate to the default Web site

  • Article

Applies To: Windows Server 2003 R2

After you obtain a server authentication certificate from a certification authority (CA), you must manually install that certificate on the default Web site for each federation server or federation server proxy in a server farm.

For ADFS-enabled Web servers, you must manually install the server authentication certificate on the appropriate Web site or virtual directory where your federated application resides.

If you are setting up a farm, be sure to perform this procedure identically (using the exact same settings) on each of the servers in your farm.

To import a server authentication certificate to the default Web site

  1. Click Start, point to All Programs, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.

  2. In the console tree, double-click Web Sites, right-click Default Web Site, and then click Properties.

  3. On the Directory Security tab, click Server Certificate.

  4. On the Welcome to the Web Server Certificate Wizard page, click Next.

  5. On the Server Certificate page, click Import a certificate from a .pfx file, and then click Next.

  6. On the Import Certificate page, click Browse, navigate to the location of the .pfx file that you obtained from your CA, click Open, and then click Next.

  7. On the Import Certificate Password page, in Password, type the password that you entered when you requested the certificate from your CA, and then click Next.

  8. On the SSL Port page, in the SSL port this web site should use box, type 443, and then click Next.

    Note

    If you chose an alternate port number on one server, be sure to use that same port number on all the other servers in the farm.

  9. On the Imported Certificate Summary page, click Next.

  10. On the Completing the Web Server Certificate Wizard page, click Finish.

See Also

Concepts

Checklist: Installing a federation server
Checklist: Installing a federation server proxy
Checklist: Installing an ADFS-enabled Web server
Certificate requirements for federation servers
Certificate requirements for federation server proxies
Certificate requirements for ADFS-enabled Web servers