Installing a Trustwave SSL Certificate on IIS Microsoft Internet Information Services 5.x/6.x

SSL Certificate installation for IIS Microsoft Internet Information Services 5.x/6.x

» Go back and choose a different type of Server

» Finished installing? Check your SSL Certificate installation with HelpNow!

» SSL Certificate Purchasing Information for Microsoft IIS 5.x/6.x

» CSR generation instructions for Microsoft IIS 5.x/6.x

Install your Trustwave SSL certificate on Windows Server 2000 / 2003 Install your Trustwave SSL certificate on Windows Server 2000 / 2003
VERY IMPORTANT: In the e-mail you received from Trustwave when your certificate was issued, there is a ZIP file. Within that ZIP file is a file that ends in .p7b. This is the only file you will need for the installation. The .p7b is the only file necessary for installation on Microsoft IIS 5.x/6.x servers. Transfer the .p7b file to the Windows Server.

Open Internet Services Manager from the Administrative Tools. Right click on the website where you previously created a CSR and choose "Properties". Press the "Directory Security" tab and then click "Server Certificate" in the "Secure Communications" section.

When the wizard starts, choose "Process the pending request..." and press "Next". In the next screen, click "Browse" and then click the drop down box to choose "All Files *.*". Now, navigate to the folder where you stored the .p7b file and select it. Press "OK" and then click next. Verify that the port number is correct (customers who are renewing a certificate will not see this step). The default SSL port is 443. Finish the wizard and your certificate and intermediates will be installed.

Installing the Trustwave intermediate certificates Installing the Trustwave intermediate certificates
VERY IMPORTANT: If you completed the steps above using the .p7b, you can STOP NOW. Your certificate is completely installed along with the intermediates. However, if you used the .cer file instead, you will need to perform the following steps:

Download the Trustwave intermediates here.

Move the file onto the Windows Server and complete the following three steps:

Double-click the xroot.crt certificate, press "Install Certificate", press "Next", and then choose "Place all certificates in the following store". Click "Browse", and then "Show Physical Stores". Click the plus (+) sign next to "Trusted Root Certification Authorities" and click "Local Computer" underneath it. Click "OK", then "Next" and then "Finish".


Installing the Root & Intermediate Certificates:

Firstly, you need to download the CA certificates (both Root CA certificate and Issuing CA certificate) as individual files

To install these certificates, you must first enable the Certificates Snap-in for the Microsoft Management Console (mmc)

  1. Click the Start Button then select Run and type mmc
  2. Click File and select Add/Remove Snap in
  3. Select Add, select Certificates from the Add Standalone Snap-in box and click Add
  4. Select Computer Account and click Next
  5. Select Local Computer and click Finish
  6. Close the Add Standalone Snap-in box, click OK in the Add/Remove Snap in
  7. Return to the MMC

To install the Root CA Certificate, we use this snap-in:

  1. Right click the Trusted Root Certification Authorities, select All Tasks, select Import.
    This starts the certificate import wizard.
    Click Next.
  2. The File to Import dialog is shown.
    Locate the Root CA Certificate file you downloaded earlier and click Next.
  3. When the wizard is completed, click Finish.

To install the Issuing CA Certificate:

  1. Right click the Intermediate Certification Authorities, select All Tasks, select Import.
  2. Complete the import wizard again, but this time locating the Issuing CA Certificate when prompted for the Certificate file.

When both certificates have been installed:

  • Ensure that the Root CA certificate appears under Trusted Root Certification Authorities
  • Ensure that the Issuing CA certificate appears under Intermediate Certification Authorities

Installing your IIS SSL Certificate:

  1. Select Administrative Tools
  2. Start Internet Services Manager
Completing the installation Completing the installation
Your new certificates are available instantly - there is no need to restart IIS or the server itself. However, if you have a Microsoft ISA 2000/2004 server in front of your IIS server, you will need to follow the installation instructions for the Microsoft ISA Server as well.

» Check your SSL Certificate Installation with HelpNow!

Trustwave Technical Support Options
Toll-Free: 866-775-2378
Direct: +1-608-294-6940
E-Mail: sslsupport@trustwave.com
SSL Certificate Customers - Instant Support!
We invite our SSL Certificate Customers to use our new instant online troubleshooter, HelpNow, to diagnose SSL Certificate issues instantly.
Get HelpNow! »
Trustwave Support Tips:
If you are contacting us about your SSL certificate via e-mail, please provide us with your website's address and a detailed description of the issue. Screenshots may also help us resolve your problem quickly, so you are welcome to include those as well.
Home Legal Information Privacy Policy Contact Us International
© Trustwave
Ph: 888-878-7817 (312-873-7500 outside U.S. or Canada) Fax: 312-443-8028 info@trustwave.com