IIS 7: SSL Certificate Installation

Overview

This guide explains how to install an SSL certificate on Microsoft IIS 7.0 and 7.5 running on Windows Server 2008 and 2008 R2.

This process assumes you have already generated a Certificate Signing Request (CSR) directly on the server. If you have received a PFX file instead, please refer to our guide on IIS 7: Importing a PFX file.

Prerequisites

• Windows Server 2008 or 2008 R2 with IIS 7.0 or 7.5
• Administrator access to the server
• CSR generated on this server via IIS Manager
• The issued certificate from FairSSL.com (.crt or .cer)
• The Intermediate Certificate (CA Bundle)

Step 1 – Install the Intermediate Certificate

1. Save the intermediate certificate as intermediate.cer to your desktop.
2. Press Windows + R, type mmc.exe and press OK.
3. Go to File → Add/Remove Snap-in.
4. Select Certificates, click Add, then select Computer account → Local computer.
5. Expand Intermediate Certification Authorities → right-click Certificates.
6. Select All Tasks → Import and select the intermediate.cer file.
7. Ensure the certificate is placed in the Intermediate Certification Authorities store. Click Finish.

[Screenshot: MMC → Intermediate Certification Authorities → Import]

Step 2 – Complete the Certificate Request in IIS Manager

1. Open IIS Manager (type inetmgr in the Start menu).
2. Select your server name in the left-hand panel.
3. Double-click Server Certificates in the centre pane.
4. Click Complete Certificate Request in the Actions panel on the right.
5. Browse to your certificate file (.crt or .cer) and enter a Friendly name (e.g. example.com 2026).
6. Select the certificate store: Web Hosting (recommended) or Personal.
7. Click OK.

[Screenshot: IIS 7 Manager → Server Certificates → Complete Certificate Request]

Step 3 – Create the HTTPS Binding

1. In IIS Manager, navigate to the specific website under Sites.
2. Click Bindings in the right-hand panel.
3. Click Add and configure the following:
   • Type: https
   • IP address: All Unassigned (or a specific dedicated IP)
   • Port: 443
   • SSL certificate: Select the certificate you just installed
4. Click OK.

Note: IIS 7 does not support SNI (Server Name Indication). Every SSL certificate requires its own dedicated IP address unless you are using a Wildcard or SAN (Multi-Domain) certificate.

[Screenshot: IIS 7 → Site Bindings → Add HTTPS]

Step 4 – Verify the Installation

Open a web browser and visit https://your-domain.com. Check that the padlock icon is displayed correctly.

Use the FairSSL SSL Scanner to validate the full certificate chain.

Troubleshooting

• "Cannot find the certificate request": This error typically occurs if the CSR was generated on a different server or if the private key was deleted. You must generate a new CSR and have the certificate reissued.
• Certificate chain warnings in browser: Ensure the intermediate certificate is installed as described in Step 1.
• Binding error on port 443: Another application is already using port 443. You can check current bindings with:

netsh http show sslcert