Who is this article for?

Users for On-prem customers who wanted to update SSL certificate

IT/admin team who have access to the application server.

This article will walk you through on how to install SSL certificate if the existing one is expired

1. Steps to Import and Bind a New SSL Certificate in IIS

This guide explains how to update an SSL certificate in IIS. Follow these steps to import the new certificate and bind it to your website securely.

1.1. Obtain the New SSL Certificate

Before updating the SSL certificate in IIS, you must have the new SSL certificate file provided by Trusted Certificate Authority (CA). If you haven’t yet requested a new certificate, follow the process through your CA

1.2. Import the New SSL Certificate

1. Open IIS Manager.

2. In IIS Manager, in the Connections pane on the left side, click on the server node and select Server Certificates under the IIS section.

3. In the Actions pane on the right, click Import.

   

4. In the Import Certificate dialog:

   1. Browse to the location where your new SSL certificate file is stored.

   2. Select the certificate file (typically .pfx if it includes the private key).

   3. Enter the password if prompted (this would be the password set when the certificate was generated).

   4. Choose the appropriate certificate store (usually the personal store is fine).

      

5. Click OK to import the certificate.

1.3. Bind the SSL Certificate to Your Site

1. In the Connections pane, expand the Sites section, then select the default website to update the SSL certificate.

2. Right click on Default website, click on Edit Bindings... to open the Site Bindings window.

   

3. In the Site Bindings window, find the https binding (this is for secure SSL traffic). If you don’t see https, click Add to create a new binding for port 443.

   

4. Select the https binding and click Edit.

5. In the Edit Site Binding window:

   1. For SSL certificate, select the new SSL certificate from the drop-down list.

   2. Click OK to save your changes.

2. Finalizing SSL Certificate Update in IIS

The following steps will help you confirm whether the SSL certificate has been successfully updated and applied in IIS.

2.1. Restart IIS Services (Optional)

It’s a good practice to restart IIS to ensure the new SSL certificate is properly applied across all services. You can do this from IIS Manager:

1. In the Actions pane on the right side of the IIS Manager window, click on Restart under the server's name.

2.2. Verify the SSL Certificate

1. Open a web browser and navigate to your website using https://.

2. Click on the padlock icon in the address bar to view the certificate details.

3. Verify that the certificate has been updated and that it’s valid. Check the Issuer, Expiration Date, and ensure the Chain of Trust is complete.