Microsoft IIS 5 & 6 - EV SSL Certificate Installation

EV SSL Certificate Installation in IIS 5 & 6

Installing your EV SSL Certificate to your Windows 2000/2003 Server

As soon as your Extended Validation certificate is approved, it will be sent to the email address you entered during the order process. The EV Certificate files will all be included in a .zip attachment. The EV SSL Certificate can also be downloaded from your DigiCert Customer account inside the "EV Certificate Manager" area. You will only need the "Certificate Bundle" file. Save your Certificate Bundle from your DigiCert Customer Account to the desktop of the web server you are securing.

1. Go back into the site in IIS and complete the installation of your certificate:

   On your Windows Server open your Administrative Tools, and go to Internet Information Services. On the Website that you created the CSR from earlier, right-click and select Properties. Select the Directory Security tab. Click the "Server Certificate..." button. The IIS Certificate Wizard will begin in a new window. Hit "Next".

   

2. On the Website that you created the CSR from earlier, right-click and select Properties. Select the Directory Security tab. Click the "Server Certificate..." button. The IIS Certificate Wizard will begin in a new window. Hit "Next".

   

3. Select the first option to Process the pending request and install the certificate.

   

4. You will then "Browse" for your EV Certificate file. Locate your certificate (your_domain_name.cer), then Click Next. Follow the rest of the wizard steps until finished.

Remove the Trusted Root Certificate from your server.

*** Note: This step is necessary to make your EV certificate backwards compatible for older browsers.

1. From the Start menu, select 'Run...'. Type 'mmc' and hit Enter.

   

2. Under the "File" menu, choose to Add/Remove Snap in.

   

3. Click the "Add" button, a new window will popup. Click on "Certificates", and click Add.

   

   

4. Make sure to choose Computer Account (NOT User Account), then click next and then Finish.

   

   

   Click OK to close the add snapin window.

   

5. Back in the main MMC window, expand the Trusted Root Certification Authorities folder and click on "Certificates". Scroll down until you find the the Certificates "Issued To" DigiCert. You will probably see 3 of them. If you see a certificate Issued To "DigiCert High Assurance EV Root CA" with an expiration date of "11/9/2031" then right-click the certificate and delete it (It is necessary to delete the "DigiCert High Assurance EV Root CA" so that your certificate chains properly on older browsers)

   Close the MMC console. If it asks you, don't save the changes you made to the MMC as it closes.

Install your EV site seal (Required)

The DigiCert EV Site Seal enables all versions of Internet Explorer 7 to display a Green URL bar. It should be displayed on a webpage that visitors view before they go to any of your secure pages. To collect your site seal code, return to your DigiCert Account and click on your order number. Then click on the "Get Site Seal" button. You can select the type of seal that you want and click the "Generate Site Seal HTML code" button. Copy and paste the site seal code into the HTML for your website where you would like the site seal to be displayed.

***Troubleshooting Tip: Internet Explorer 7 also requires that the phishing filter be turned ON in order to turn the address bar green.

Restart your Server.

You will normally just need to restart IIS to have it start using the new certificate. If that doesn't work, shutdown and restart the whole server. The installation of your EV SSL Certificate is now complete.

EV SSL Certificates :: Microsoft Internet Information Server 5/6

How to install your EV SSL Digital Certificate to your Windows 2000 or 2003 Server.

• • Return to SSL Installation
  • IIS 5 and 6 CSR Creation
  • IIS 5 and 6 SSL Installation
• • SSL Products
  • SSL Plus
  • SSL Cert Comparison
  • Wildcard Certificates
  • Wildcard SSL Comparison