(1) Open Internet Information Services (IIS) Manager
(2) Create a Self-Signed CertificateA self-signed certificate is an identity certificate that is signed by its own creator. Certificates are signed by Certificate Authority. In general self signed certificates are fine for testing purpose but not for production. There are two ways to create a self-signed certificate: - IIS is used
- MakeCert.exe using Visual Studio's tools
This article only shows how to create a self-signed certificate with IIS. After opening IIS Manager, double-click Server Certificates.
(3) Add a website to IISUnder Binding, select https, the default port is 443 (http default port is 80), and the SSL certificate is the self-signed certificate we created above.
(4) It can also be implemented by adding Site Binding
Click Add
(5) Open the browser
Click on the small lock next to the address bar to check the certificate
(6) Open the Certificate Management tool and view Trusted Root Certification Authorities
You can see that when you create a self-signed certificate in IIS, the server has already added it to the Trusted Root CA. On the client side, you need to manually install the root certificate.
(7) Certificate issuing bodyIf you want to use a certificate trusted by your browser, you need to use a certificate issued to you by a certificate authority (CA), such as Verisign, Thawte, etc. Self-signed certificates can be used in development test environments and not in production environments.
|