Configuring Server Certificates for Certificate Enrollment Web Services

Applies To: Windows Server 2008 R2

The certificate enrollment Web services require HTTPS connections. Follow this procedure to select a Server Authentication certificate and configure the HTTPS binding.

To configure the HTTPS binding

1. Open Server Manager.

2. In the console tree, expand Roles, and then expand Web Server (IIS).

3. Click Internet Information Services (IIS) Manager.

4. In the console tree under Connections, expand the Web server, expand Sites, and then click the Web site that hosts the Web service.

5. In the Actions pane, click Bindings.

6. In the Type list, click https, and then click Edit.

Note

If https is not in the list, click Add, click https, and then select the IP address and port of the site that hosts the Web service.

7. In the SSL Certificate list, select a certificate.

Note

The specified certificate must include the Server Authentication purpose and have a subject name that matches the host name that client computers will use to access the Web service. To request a Server Authentication certificate, see Request Certificates by Using the Certificate Request Wizard (https://go.microsoft.com/fwlink/?LinkId=143456).

8. Click OK to save the binding.

Additional references

• Checklist: Authenticate Web Servers with Certificates Issued by a Windows-Based CA

• Setting Up Certificate Enrollment Web Services

• Installing the Certificate Enrollment Web Service

• Installing the Certificate Enrollment Policy Web Service