How to install one SSL Certificate across multiple servers in IIS 8 on Windows Server 2012

hello in this video tutorial you are going to learn how to install one SSL certificate across multiple servers in is-8 on Windows Server 2012 by such in semi part by ID coz calm right now we are on our local machine this is Windows 7 we are going to access the server using remote desktop I have already opened up to remote desktop connection window 1 is 192.168.1.1 hundred and the second one is 192.168.1.1 0 9 first let us access our primary server which is 192.168.1.1 hundred this is a remote desktop connection as you can see over here this is the main server where we have configured the SSL certificate which we have got from the certification authority now let's go to run and type MMC this brings up the Microsoft management console window click on file go to add and remove snap in from the added remove scrapping window click on certificates and then click on add select computer account click Next keep the default option local computer click on finish' now the certificate snap-in is added click on ok on the console window expand these certificates here you will see multiple folders expand the personal folder now click on certificates folder on the right side of the box you can see all the certificates which is installed on your server right click on the certificates which you want to export from the menu click on all tasks select export this brings up the certificate export wizard this result helps you copy certificates certificate trusts list and certificate revocation list from a certificate store to your local disk now click on next this takes us to export private key window you can choose to export the private key with this certificate select the first option yes export the private key click next next option is export file format the options are already selected personal information exchange and the first checkbox include all certificates in this certification path if possible now let's click Next on the security window to maintain these security you must protect the private key to a security principle or by using a password click on the password check box enter the password of your choice in the confirm password box enter the same password now click Next click on browse select the location where you want to save the dot pfx file in our case I am going to save it onto the desktop let us give a descriptive name to the file I have given demo SSL dot is Z or Z com now click Save now it is showing the full path where the file is going to be saved click on next click finish this is the export was successful click on OK now minimize the console window over here you can see the file which we have exported from the certificate store now on the console window you will see demo ssl.com which we have exported in the intermediate certification Authority you can also see GoDaddy secure certificate authority this certificate is also there in the pfx file which we have exported and there is one more certificate which is not shown over here close this certificate console window ok now we are going to copy the dot pfx file to our secondary server right click and click on copy minimize the remote desktop connection window of the server ok and now we are going to paste the dot pfx file onto our local machine once again we are going to copy the pfx file from our local machine and paste it on to our secondary server right click on the pfx file copy open the secondary server remote desktop connection window and paste the pfx file onto that server this is server 2 and the IP address of the server is 192.168.1.1 zero nine now let's go to run and type MMC this will open Microsoft management console once again click on file go to add and remove snap in from the snap in window select certificates click on add select computer account and click Next and then click on finish now click OK from the console window expand these certificates by clicking on the arrow sign if I try to expand the personal folder presently it is empty now right-click on the personal folder go to all tasks click on import this brings up certificate import wizard now let's click Next click on browse go to the location where you have copied the dot pfx file in our case it is on desktop from the filter extension drop-down select personal information exchange now you will able to see the dot pfx file select the file and click on open then click Next enter the password which you have said when you have exported the pfx file you can click on the display option to check the password which you have entered once again click Next on the certificate store window select the first option automatically select the certificate store based on the type of certificate after that click Next then click on finish the import wizard boss successful click on OK go to the personal folder right click and then click on refresh now as you can see the certificate folder is showing click on it insert the certificate folder we can see the certificate which we have imported into this certificate store this is demo SSL dot is zoz calm similarly if I check into the intermediate certification Authority store I will find the intermediate certificate for our certificate which is GoDaddy secure certificate authority basically it is a chain of certificates if the certificate chain is break our certificate will be no longer valid now let us minimize the MMC console now open server manager okay from the server manager click on Tools and from the menu select Internet Information Service from the connection pane click on server node expand the sites folder once again let's click on the server node go to the is section in the iOS section click on server certificates on the server certificate window you can see the certificate which we have imported in this certificate store on the certificate if I click on the certificate path this will show me the chain of certificates the first one is demo SSL dot is Z of Z comm the second one is GoDaddy secure certificate authority and the third one is GoDaddy root certificate authority now let's close the certificate and go to demo SSL dot it I see Ozzy comm from the action pane click on bindings click on add 10 from the type drop-down select HTTP protocol ok if you see the port it has automatically changed into 443 which is a port number for HTTP in the hostname type your domain name for our case it is demo SSL dot is Z or Z comm from the SSL certificate drop-down select your certificate in our scenario it is demo SSL dot is Z or Z comm you can click on the view option to view the certificate let's click OK now click on close from the action pane window select the second option browse demo s 0.80 Z or Z calm which is on port 443 the Internet Explorer has open in background now here as you can see the site is working on HTTPS if you click on the lock sign you can see the certificate is issued by GoDaddy root certificate authority and it had identified this site now let us close the internet explorer and also the server manager this completes our this video tutorial hello friends thank you for watching our this video tutorial if you liked this video give it a thumbs up subscribe to save an email update whenever we post a new video here it with your technical ID friends if you are facing any technical problem or have any suggestions post your comment here or catch me on Google+ hangout Facebook Twitter and Skype this video tutorial is presented by such in semi powered by id coz comm and you are watching this on YouTube

Channel: Sachin Samy

Views: 120,974

Keywords: SSL Certifica, multiple servers, IIS 8, Windows Server 2012, install, export .pfx file, import .pfx file

Id: njN-k6TdSk4

Length: 10min 55sec (655 seconds)

Published: Sun Nov 24 2013