Microsoft SharePoint 2013: SSL Certificate Installation Instructions

SharePoint 2013: Installing Your SSL Certificate

  
Microsoft SharePoint 2013 does not include a GUI for installing the SSL Certificate. Because SharePoint 2013 is designed to run on Microsoft IIS 8, you can use IIS. If you have not yet created a Certificate Signing Request (CSR) and ordered your certificate, see Microsoft SharePoint 2013: SSL Certificate CSR Creation Instructions.

The SharePoint SSL Certificate installation process consists of three steps:

1. Installing the SSL Certificate
   
   • If you used IIS 8 to generate your CSR, you need to use IIS 8 to install the SSL Certificate,
     See Using IIS 8 to Install the SSL Certificate.
   • If you used the DigiCert® Certificate Utility for Windows to generate your CSR, you need to use the DigiCert Certificate Utility to import/install your SSL Certificate.
     See SSL Certificate Importing Instructions: DigiCert® Certificate Utility for Windows.
2. Assigning or binding the certificate to your SharePoint site
   See Using IIS 8 to Assign the Certificate to the SharePoint Website.
3. Installing the root certificate
   See Using SharePoint 2013 to Install the Root Certificate.

SharePoint 2013: How To Install Your SSL Certificate

Using IIS 8 to Install the SSL Certificate

After DigiCert validates and issues your SSL Certificate, you can use Microsoft IIS 8 to install your SSL Certificate to the server where you generated the CSR, and then, bind it the SharePoint site.

1. Save the SSL Certificate file (your_domain_name.cer) to the server on which the CSR was generated.
2. Open Internet Information Services (IIS) Manager.
   From the Start screen, type and click Internet Information Services (IIS) Manager.
3. In Internet Information Services (IIS) Manager, under Connections, select your server’s Hostname.
   
4. In the center menu, in the IIS section, double-click the Server Certificates icon.
5. In the Actions menu, click Complete Certificate Request to open the Complete Request Certificate wizard.
   
6. On the Specify Certificate Authority Response page, under File name containing the certification authority’s response, click … to browse to the .cer certificate file that DigiCert sent you, select the file, and then, click Open.
   
7. Next, in the Friendly name box, enter a friendly name for the certificate. The friendly name is not part of the certificate; instead, it is used to identify the certificate.
   We recommend that you add DigiCert and the expiration date to the end of your friendly name, for example: yoursite-DigiCert-expirationDate. This information helps identify the issuer and expiration date for each certificate. It also helps distinguish multiple certificates with the same domain name.
8. Next, in the Select a certificate store for the new certificate drop-down list, select Personal.
9. To install the SSL Certificate to the server, click OK.
10. Once you have successfully installed the SSL Certificate to the server, you still need use IIS to assign or bind that certificate to the SharePoint site.

Using IIS 8 to Assign the Certificate to the SharePoint Website

1. In Internet Information Services (IIS) Manager, under Connections, expand your server’s name, expand Sites, and then select the SharePoint site.
   
2. In the Actions menu, under Edit Site, click Bindings.
3. In the Site Binding window, click Add.
   
4. In the Add Site Bindings window, enter the following information:
   

   Type:	In the drop-down list, select https.
   IP address:	In the drop-down list, select All unassigned.
   	If your server has multiple IP addresses, select the one that applies.
   Port:	Enter 443, unless you are using a non-standard port for SSL traffic.
   SSL certificate:	In the drop-down list, select the friendly name of the certificate that you just installed.

   
5. When you are finished, click OK.
   
6. Now you need to install the root certificate on your SharePoint server.

Using SharePoint 2013 to Install the Root Certificate

1. Log into the DigiCert® Management Console (your account).
2. In the DigiCert® Management Console, under Order, click the order number for the SSL Certificate that you just installed.
3. On the My Orders tab, click Download.
   
4. In the Download Certificate section, click the Download or Copy/Paste Individual Certificates link.
   
5. Next, click the ROOT CERTIFICATE icon.
   
6. In the Opening TrustedRoot.crt window, click Save File to save the file to your SharePoint server.
   
7. Next, open SharePoint 2013 Central Administration.
   From the Start screen, type and click SharePoint 2013 Central Administration.
8. In SharePoint 2013 Central Administration, in the menu on the left, click Security and then, under General Security, click Manage trust.
   
9. On the Trust Relationships page, in the menu at the top of the page, click New.
   
10. In the Establish Trust Relationship window, in the General Setting section, in the Name box, type the name that you want to give the SSL Certificate.
    
11. In the Root Certificate for the trust relationship section, click Browse to browse for and select the root certificate (i.e. TrustedRoot.crt).
12. In the Establish Trust Relationship window, click OK.
13. If the certificate is installed successfully, it should be listed on the Trust Relationships page.
    

Test Your Installation

If your web site is publicly accessible, our DigiCert® SSL Installation Diagnostics Tool can help you diagnose common problems.

Troubleshooting

If you run into certificate errors, try repairing your certificate trust errors using DigiCert® Certificate Utility for Windows. If this does not fix the errors contact support.

Additional Information

IIS 8 and Windows Server 2012 have the Server Name Indication-SNI feature, which you can use to host multiple SSL sites and certificates on a Single IP Address based on Host Headers on your IIS 8 server.

• IIS 8 and IIS 8.5 SNI Browser Support
• How to install and configure your SSL Certificate on Windows Server 2012 - IIS 8 (Multiple Certificates Using SNI)