Support Desk

  1. Support Desk
  2. Install SSL

Install SSL Certificate Microsoft IIS 7

Download and unzip your certificate files

Download and unzip your certificate files by clicking on the download link in your fulfillment email or from your GeoCerts SSL Manager account. You will find one .cer file that contains your domain SSL server certificate and any required intermediate CA certificates in PKCS#7 (P7B) format. Copy the file and save it on the same server you used to create the CSR.

  • your_domain_com.cer

Install the PKCS#7 SSL Server Certificate File

  1. Open the Internet Information Services (IIS) Manager. From the Start button select Programs > Administrative Tools > Internet Information Services Manager.
  2. In the IIS Manager, select the server node on the top left under Connections

  3. In the Features pane (the middle pane), double-click the Server Certificates option located under the IIS or Security heading (depending on your current group-by view).

  4. From the Actions pane on the top right, select Complete Certificate Request.

  5. On the Complete Certificate Request page browse to the SSL certificate file your_domain_com.cer.

  6. Next, type a friendly name for the certificate in the Friendly name box, and then click OK. Something like www.mydomain.com-20XX will do.

    Caution: you may receive the following error: Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created. You can ignore this error. Just click cancel. This is a known bug in IIS7.
  7. Your SSL server certificate is now installed on your server and you should see it listed in the Server Certificates view. Now you will need to configure your web site to use the certificate.

Edit Bindings

  1. If you have only one web site it will mostly likely be listed in IIS 7 as the Default web site. Select and right-click on the Default web site and select Edit Bindings.


    If you only see 'http' under the Type column of the Web Site Bindings dialog box click the Add button and select 'https' from the drop down box under Type.


    Then select the name of the SSL certificate from the SSL certificate list that you just installed and click Ok.


    Then click Close to complete the Edit Bindings wizard.

    Caution: you may receive the following error: There was an error while performing this operation Details: CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b (ASN:276) You can ignore this error. Just click cancel. This is a known bug in IIS7.

Verify Installation

  • To verify if your certificate is installed correctly, use our Certificate Installation Checker.
  • Test your SSL certificate by using a browser to connect to your server. Use the https protocol directive. For example, if your SSL was issued to secure.mysite.com, enter https://secure.mysite.com into your browser.
  • Your browser's padlock icon will be displayed in the locked position if your certificate is installed correctly and the server is properly configured for SSL.

Additional Resources

Please contact our support team if you have any additional problems or questions.