Changing SSL Certificate in IIS Manager

Use this procedure when you need to add or replace the SSL certificate for Insight. At the end of this procedure, you will need to restart the server, so you should perform this procedure during a time of low user activity.

To change the Insight website’s SSL certificate using IIS Manager

  1. Open the Internet Information Services (IIS) Manager (Start > Run > inetmgr).

  2. In the Connections panel on the left, click the server name for which you want to generate the CSR.

  3. Click No if the message "Do you want to get started with Microsoft Web Platform to stay connected with latest Web Platform Components?" appears.

  4. In the middle panel, under IIS, double-click Server Certificates.

  5. In the Actions panel on the right, click Complete Certificate Request.

    		6.

    If you want to create a self-signed certificate. click Create Self-Signed Certificate first, create the certificate and send it to a Certificate Authority, then follow this procedure to complete the certificate request.

  6. Do the following to install the certificate:

    1. File name containing the certificate authority's response - Locate the .crt file (response from Certificate Authority) on your computer, and then click Open.

    2. Friendly name - Provide a unique name to identify the SSL certificate. For wildcard SSL certificates, make sure your friendly name matches your common name (such as *.coolexample.com).

    3. Select a certificate store for the new certificate - Select Personal.

    4. Click OK to save the certificate.

  7. In the Connections panel on the left, select the name of the server on which you installed the certificate.

  8. Click the site you want to secure with the SSL certificate. (This process is called binding.)

  9. In the Actions panel on the right, click Bindings,

  10. In the Site Bindings dialog box, click the site's Host Name, then click Add (or Edit if you are updating a certificate binding).

  11. Do the following to configure the settings:

    1. Type - Click https.

    2. IP address - Click All Unassigned, or the IP address of the site.

    3. Port - Type the port number you are using for Insight (443 by default).

    4. Host name - Type the host name for Insight (e.g., eftinsight.com).

    5. SSL certificate - Specify the certificate that you are binding.

    6. Click OK.

  12. Click Close to close the Site Bindings dialog box.

  13. In the Actions panel on the right, click Restart to complete the installation process.