Installing the certificate on the Web server

Archived content. No warranty is made as to technical accuracy. Content may contain URLs that were valid when originally published, but now link to sites or pages that no longer exist.

After you receive your response file from the CA, you must install it on the Web server. You can then export the certificate to be used on the ISA Server computer. However, you cannot install the certificate directly to the ISA Server computeryou must first install it on the Web server computer for which the certificate was requested.

Install the certificate on the Web server

  1. Click Start , point to All Programs , point to Administrative Tools , and select Internet Information Services (IIS) Manager .

  2. Double-click the local computer, and then double-click the Web Sites folder.

  3. Right-click the Web site you are requesting a certificate for, and click Properties .

  4. On the Directory Security tab, under Secure Communications , click Server Certificate .

  5. In the Web Server Certificate Wizard, on the Welcome page, click Next .

  6. On the Server Certificate page, click Process the pending request and install the certificate , and then click Next .

  7. In the File name box, type the location of the certificate response file (you may also browse to the file), and then click Next .

  8. On the SSL Port page, in the SSL port box, select the SSL port that the Web site will use.

    By default, this is port443.

  9. On the Certificate Summary page, review the information to ensure that you are processing the correct certificate, and then click Next .

  10. On the Completing the Web Server Certificate Wizard page, click Finish .

Verify that the server certificate was properly installed

  1. On the Start menu, click Run .

  2. In the Open box, type MMC , and then click OK .

  3. In Microsoft Management Console (MMC), on the File menu, click Add/Remove Snap-in .

  4. In the Add/Remove Snap-in dialog box, click Add .

  5. In the Add Standalone Snap-in dialog box, click Certificates , and then click Add .

  6. In the Certificates snap-in dialog box, select Computer account , and then click Next .

  7. In the Select Computer dialog box, verify that Local computer: (the computer this console is running on) is selected, and then click Finish .

  8. Click Close to close the Add Standalone Snap-in dialog box, and then click OK to close the Add/Remove Snap-in dialog box.

  9. In MMC, double-click Certificates (local computer), and then double-click Personal .

  10. Click Certificates , and then double-click the new server certificate.

  11. On the General tab, verify that there is a note that says You have a private key that corresponds to this certificate .

  12. On the Certification Path tab, verify the hierarchical relationship between your certificate and the CA, and verify that there is a note that says This certificate is OK .

  13. Click OK to close the Certificate properties box.

  14. On the File menu, click Exit to close MMC.

  15. In the message that appears, click Yes to save the console settings.

  16. In the File name box, type a descriptive name, such as LocalComputerCertificates.msc , and then click Save .