Microsoft SharePoint 2010 – SSL Installation

Like the majority of server systems you will install your SSL certificate on the same server where your Certificate Signing Request (CSR) was created. This is because your private key will always be left on the server system where the CSR was originally created. With Microsoft systems the private key is hidden away and will only appear once the CSR request has been completed. Your SSL certificate will not work without this private key file. We will assume that this is the original system.

To Install your SSL certificate on Windows IIS 7 and 7.5 for SharePoint 2010 perform the following.

Step 1: Picking up your SSL Certificate:

1. If you had the option of server type during enrollment and selected IIS you will receive a pkcs#7/.p7b version of your certificate within the email. Alternately you can access your Certificate User Portal by the supplied link in the email to pick up the pkcs#7 version of your certificate.
2. Copy the SSL certificate and make sure to copy the —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—– header and footer Ensure there are no white spaces, extra line breaks or additional characters. Use a plain text editor such as Notepad, paste the content of the certificate and save it with extension .p7b (When performing this on a Windows system the Icon of the file should change into a certificate icon)

Step 2: Installing your SSL certificate:

1. Go to Start > Administrative Tools > Internet Information Services (IIS) Manager.
2. From the left menu, Click the server name.
3. In the middle pane, under Security, double-click Server Certificates.
4. In the right Action pane click on Complete Certificate Request.
5. Click on the button, navigate and select the location of your new certificate file. (change the file type you are searching for to all .p7b as the default type may be .cer)
6. Specify a Friendly name for quick identification of your new certificate.
   Note: With a Wildcard certificate, you want to make sure to give it a wildcard friendly name. Example: *.domain.com.
   IIS 7.x  will not let you set an SSL host header unless the friendly name starts with * when you bind your certificate to your sites. Host header/name is used to assign the wildcard certificate to be used on a specific site. You will perform the binding in Step 3 of these instructions.
7. Click Ok.
   Note: You may receive an error when the system is performing the install. This is typically with a glitch with the IIS 7 to 8 series.
   
   1. Click Ok to acknowledge the error message, and Cancel out of the Complete Certificate Request Wizard.
   2. Hit F5 on your keyboard to refresh the IIS console. Your new certificate should appear in the Middle pane under Server Certificates. It might be missing a friendly name. If you see the new certificate in this pane it means that installation was successful.
      Note: If your certificate still does not appears then either the CSR request was never created on this system, or your private key was damaged. You will have to generate a new CSR request and perform a reissue of the certificate.

Step 3: Assign and Bind the SSL certificate to your web site:

1. Click Start > Administrative Tools > Internet Information Services (IIS) Manager.
2. Browse to your server name > Sites > Your SSL-based site.
3. In the Actions pane, click Bindings…
   
   
4. In the Site Bindings window, If there is no existing https binding, choose Add and change Type from HTTP to HTTPS.
5. Note: If there is already a https binding, select it and click Edit.
6. From the SSL Certificate drop down, Specify a  Friendly Name for the SSL certificate that will be used for this site.
   
7. Click OK.

Step 4: Configuring SharePoint:

1. Download your SSL certificate’s Root here.
   Note: When creating your Root certificate file save it with a .crt extension.
2. From the Start screen bring up and click your SharePoint 2010 Central Administration console.
3. On the left pane click Security, and under General Security click Manage trust.
   
4. Click on the Trust Relationships Tab.
5. Click New.
   
6. In the Establish Trust Relationship pop up window under the General Setting Name field, specify a friendly name for your Root certificate.
7. Under Root Authority Certificate Click Browse and specify the name and path of your root certificate file you downloaded and created.
8. Click OK.
   
9. If successful you will see the root certificate listed under the Trust Relationships tab.

You have successfully configured your SharePoint 2010 system.

If you are unable to use these instructions for your server, Acmetek recommends that you contact either the vendor of your software or the organization that supports it.

Windows Support

For more information refer to Microsoft.