We always recommend an SSL security certificate be installed on your Portal or Full Website as it provides a better presence for your site.
Inzant can manage the generation and installation of an SSL certificate for you however if you would prefer to supply your own certificate we have provided this procedure to assist. Please note, we will require the certificate be supplied to us in PFX format (with the appropriate password) to allow us to install it.
Special Considerations
Please Note:
- We have had the occasional occurrence of certificates supplied externally not operating correctly with the result being sites become unavailable for short periods of time. We have not been able to identify the reason for the issue and the suppliers of the certificates have also not been able to shed any light on the cause either. We have also found once a certificate generated by ourselves is installed, the issue is resolved.
- With that in mind, we guarantee that certificates generated and managed by Inzant will operate correctly, however we cannot provide that guarantee for certificates provided by others. Further more, any works required by Inzant to address issues with certificates supplied by others will charged at our normal schedule of rates.
Generating an SSL certificate request
We have provided instructions using Internet Information Services Management on the Microsoft Server platform with the IIS Service activated, however this process should be available from other platforms.
- You will need to do your own research if using another platform
To begin the process
Login in to Microsoft Server
- In Administrative Tools, Select "Internet Information Services (IIS) Manager"
This will display the IIS Manager Application
- Select the IIS Instance from the Connections Panel you wish to use to create the certificate.
- Click "Server Certificates"
This will display the Server Certificates that are already installed on the server as well as controls to allow you to manage certificates
To create a new Certificate, you need to create a Certificate Request.
You will use this to generate the SSL certificate with your certificate provider.
- Click Create Certificate Request
This will present a form to allow you to enter the details for the certificate.
- Complete the details for the Certificate
- Click Next
Note: The Common Name is the URL you wish the certificate to apply for. If you are unclear of this, please contact Inzant Support
- Select "Microsoft RSA Channel Cryptographic Provider"
- Select a Bit Length of 2048
- Click Next
- Select a location and filename for the Certificate Request file
- Click Finish
This file will be used to create the SSL Certificate with your provider. Please follow the instructions of your SSL Certificate provider to create the certificate.
If given a choice when the certificate is obtained, please select a version suitable for IIS.
Completing an SSL certificate request
Once you have created and downloaded the Certificate from you SSL Certificate provider, you will need to complete the Certificate Request using IIS Manager.
- Click "Complete Certificate Request"
This will display the Complete Certificate Request form.
- Select the File containing the newly created Certificate
- Provide a friendly name as you will need to be able to identify the certificate in the list (we recommend using the actual url the certificate will be protecting)
- The certificate store can be left as Personal
- Click "OK"
This will install the certificate on the server and it will now appear in the Server Certificates list
There are two means of exporting the certificate in a suitable (PFX) format. If the certificate has been created using IIS Manager, then this tool can be used to export the certificate as well.
Exporting as PFX using IIS Manager
- Select the Certificate to export in the list of certificates. The name will be the friendly name used when the certificate was completed.
- Click on Export
- Complete the popover fields (remembering the password used as we will require it.
- Click OK
This will generate a PFX file that you need to forward to us along with the password so we can install the certificate for your site
You can also use the following method to export certificates using the certlm
- Select the Certificate in the list
- The Name will be the friendly name
- If you have multiple Certificates installed, check the Expiration Date to ensure you export the correct certificate
- Right Click on the line
- Click on Export in the All Tasks menu
This will display the Export Certificate Wizard
- Click Next
- Select Yes, export the primary key
- Click Next
- Select Personal Information Exchange - PKCS #12 (.PFX)
- Ensure Include all Certifcates is selected
- Ensure Export all extended properties is selected
- Ensure Enable certificate privacy is selected
- Click Next
- Enter and confirm a password for the certificate. (you will need to send to us to install the certificate)
- Ensure Encryption is set to TripleDES-SHA1
- Click Next
- Enter a location to save the exported certificate to (you will need to send this to us)
- Click Next
Click Finish to generate the exported certificate.
Providing the SSL Certificate to Inzant for Installation
All that is required from here is to:
- Send us the pfx file
- And Let us know the password used to create the file
- We recommend NOT suppling the password and certificate in the same manner (possibly email pfx file, call and advise the password)
Once we have both these details we will install the certificate and check it looks ok.