How to Renew Your SSL Certificate on IIS

1 Star2 Stars3 Stars4 Stars5 Stars (15 votes, average: 3.40 out of 5)
Loading...

Renewing an SSL certificate on IIS has never been easier

If you’re thinking of renewing or updating your SSL/TLS certificate on your IIS server, then you’re thinking in the right direction. And not only that, but you’ve landed in the perfect place to learn how to renew your SSL certificate on the IIS server – whether it’s IIS version 5, 6, 7, 8, 8.5, or 10. In this post, we’ve broken down the IIS SSL/TLS renewal process in simple steps that will get your SSL cert renewed in no time!

Let’s get started!

Renew SSL Certificate on IIS 5, 6 & 7 (This will have hash code to direct the reader to this particular part of the article)

Renew SSL Certificate on IIS 8, 8.5 & 10 (This will have hash code to direct the reader to this particular part of the article)

Renew SSL Certificate on IIS 5, 6 & 7 Server

The process of renewing SSL/TLS on IIS 5, 6, and 7 can be divided into three parts: CSR generation, SSL renewal, and Installing the new SSL certificate. Let’s take a look at each of them in a simple series of steps.

Generate an SSL Certificate Renewal CSR in Microsoft IIS 5, 6 & 7 Server

  1. First, go to Start > Administrative Tools > Internet Information Services (IIS) Manager.
  2. In the left pane named Connections, click on your server’s hostname.
  3. In the middle pane, you should see various options for your server. Double-click on the Server Certificates icon.
  4. In the right pane named Actions, click on Create Certificate Request
  5. Now you’ll be asked information to generate a new CSR. This is what each field means:

Common Name: Your domain name (e.g., www.yourdomainname.com)

Organization: Legally registered name of your organization/company (e.g., Your Company, LLC; Your Company, Inc.)

Organizational unit: The department of your organization (If you don’t know what to put, just enter ‘IT’).

City/locality: The city/municipality where your organization is located.

State/province: The state where your organization is located.

Country/region: Your country’s abbreviated two-letter country code.

  • Click on Next.
  • Select Microsoft RSA SChannel Cryptographic Provider as a Cryptographic service provider and 2048 as Bit Length.
  • Click Next.
  • Specify your convenient location to store your newly generated CSR.
  • Click Finish.

Renew Your SSL Certificate On Windows Server

The SSL renewal process isn’t the same for everyone, as it depends on where you purchased your SSL certificate from. You need to log into your account (of the platform where you purchased your SSL) and submit a renewal request by pasting your new CSR. Once the certificate authority (CA) has received your renewal request, it will conduct a verification process (like it did at the time when you bought your SSL certificate the first time).

Once the vetting process is over, the CA will issue the new (renewed) SSL certificate to you. You’re supposed to install this certificate on your IIS server.

Save Up to 82% on RapidSSL Certificates!

Protect your website with a RapidSSL single domain or wildcard SSL certificate and get a RapidSSL site seal for free.

Shop Now

Install Your Renewed SSL Certificate on IIS Server

  1. First, save the certificate to the same server from where you had generated your CSR.
  2. Open your IIS Manager.
  3. In the left pane named Connections, click on your server’s hostname.
  4. In the middle pane, you should see various options for your server. Double-click on the Server Certificates icon.
  5. In the right pane named Actions, click on Complete Certificate Request…
  6. Click on the three dots (…) to browse to the .CER certificate file of your renewed SSL certificate.
  7. Now give the certificate a friendly name that will be easy for you to refer to in the future and click OK.
  8. Under the Connections pane, expand your server’s computer name, and then click the website that you want to enable SSL on.
  9. Go to the Actions menu and click on Bindings.
  10. In the Site Bindings pop-up, select https and click on Edit…
  11. Now in the Add Site Binding pop-up, choose your renewed SSL (its friendly name) and click OK.
  12. Go to the SSL Checker tool to verify your SSL installation and check for its new expiry date.

Congratulations! You have just renewed your SSL certificate on your IIS server.

Renew SSL Certificate on IIS 8, 8.5 & 10

The progression of renewing SSL on IIS 8, 8.5, or 10 can be separated into three sections: CSR generation, SSL renewal, and Installing the new SSL certificate. Let’s take a look at each of them!

Generate an SSL Certificate Renewal CSR in Microsoft IIS 8, 8.5 & 10

  1. First, go to Start and type Internet Information Services (IIS) Manager and click on it.
  2. In the left pane named Connections, click on your server’s hostname.
  3. In the middle pane, you should see various options for your server. Double-click on the Server Certificates icon.
  4. In the right pane named Actions, click on Create Certificate Request
  5. Now, in the Distinguished Name Properties page, you’ll be asked information to generate new CSR. This is what each field means:

Common Name: Your domain name (e.g., www.yourdomainname.com)

Organization: Legally registered name of your organization/company (e.g., Your Company, LLC; Your Company, Inc.)

Organizational unit: The department of your organization (If you don’t know what to put just enter ‘IT’).

City/locality: The city/municipality where your organization is located.

State/province: The state where your organization is located.

Country/region: Your country’s abbreviated two-letter country code.

  • Click on Next.
  • In the Cryptographic Service Provider Properties pop-up, select Microsoft RSA SChannel Cryptographic Provider as Cryptographic service provider and 2048 as Bit Length.
  • Click Next.
  • Specify your convenient location to store your newly generated CSR.
  • Click Finish.

Renew Your SSL Certificate

See previous “Renew Your SSL Certificate” section as it’s the same direction.

Install Your Renewed SSL Certificate on IIS Server

  1. First, save the certificate to the same server from where you had generated your CSR.
  2. Open your IIS Manager.
  3. In the left pane named Connections, click on your server’s hostname.
  4. In the middle pane, you should see various options for your server. Double-click on the Server Certificates icon.
  5. In the right pane named Actions, click on Complete Certificate Request…
  6. Now, in the Specify Certificate Authority Response page, click on three dots (…) to browse to the .cer certificate file that you received from your certificate authority (CA). Give your certificate a friendly name that’s easy for you to refer to in the future and select an appropriate certificate store.
  7. Click on OK.
  8. Now go back to IIS Manager and, in the left pane, expand your server’s name. Expand Sites and select the website on which you want to install an SSL certificate.
  9. In the Actions pane on the right, click on Bindings…
  10. In the Site Bindings pop-up, click on https and then click Edit.
  11. Now in the Edit Site Binding window, select the SSL certificate by its friendly name.
  12. Click OK.
  13. Go to the SSL Checker tool to verify your SSL installation and check for its new expiry date.

Congratulations! You made to the end of the “How to Renew Your SSL Certificate on IIS” process!