How to Configure SSL Certificate for SharePoint Web Application on IIS7/Window Server 2008

Introduction

The configuration of SSL certificate on IIS 7 (Windows Server 2008) is a bit different than in IIS 6. In this article, I will demonstrate on how to configure SSL certificate on SharePoint Central Administration Site, which is deployed on Windows 2008 Server.

• Log on to SharePoint Web Front End Server
• On command prompt, type inetmgr to open IIS Manager.
• Click on the IIS Server (Machine Name) and then Double Click Server Certificates

• Click Create Self-Signed Certificate link on the right side of the pane.

• Enter the name of SSL Certificate. You can create separate SSL certificate for each web application in your SharePoint farm.

• Click OK to create the certificate.
• Now, extend the SharePoint Central Administration web site.
• Open Internet Explorer and browse Central Administration web site.
• Click Application Management and then click Create or extend Web application.

• Click Extend an existing Web application link.

• Enter the following information in the next screen below:
  • IIS Web Site (Port): Enter 443
  • Host header: Enter host header name of your central administration web site
  • Security Configuration (Use Secure Socket Layer (SSL)): Select Yes
  • Zone: Choose the zone for the central administration web site which is free

• Now open IIS Manager and Right click on the extended Central Administration Web Site and Click Edit Bindings.

• Click Edit button, this action will open another window. Select SSL certificate that you have previously created and click OK to associate the SSL certificate.

• Open Internet Explorer and browse SharePoint central administration site on https protocol e.g. https://centraladminssl/

Note: The error on the above page shows that your certificate is not trusted. In the production environment, you must trust 3^rd party certificate, e.g. VeriSign, etc.

Now your SharePoint central administration is running on SSL certificate.

History

• 27^th November, 2009: Initial post