This document provides steps to generate a signed certificate and configure SSL on IIS in Windows Server 2016. It involves generating a certificate request, submitting it to the CA server, saving the signed certificate, and binding the certificate to the default website on port 443. Finally, the document validates that SSL is working properly by checking the netstat output and accessing the website URL via HTTPS.

1. Como instalar Active Directory Certificate Services (AD CS) Windows Server
2016
by Josinfo - Parte 02
>>>>> Gerando um Certificado Assinado <<<<<
Step 1– Open Server Manager, select ‘tool’ and open IIS
Step 2– Expand Sites to Default Web Site
> Open Server Certificates
Step 3– Click "Create Certificate Request"
Step 4– Fill all options below with your company information’s
[AD/CS]- 02: IIS with SSL
domingo, 19 de maio de 2019 02:55
Página 1 de WINSERVER

2. Step 5– Change Crypto Lengh value’s to increase hash
Step 6– Save the file CRV.txt, these will be used to request certification under CA root
Página 2 de WINSERVER

3. Step 7– Open CA/certsrv and and click on “Request Certicate” (with administrator account)
Step 8– Click in "Advanced certificate request"
Step 9– Click in Submit a certificate request by using a base-64-enconded ....
Step 9– Open the CRV.txt File
> Copy all information
> Paste under Saved Request
> Submit
Página 3 de WINSERVER

4. Step 10– Save certfile.cer
> Select DER enconded
> Save
Step 11– Return IIS console
> Open Server Certificate
Página 4 de WINSERVER

5. Step 11– Open Conplete Certificate request
Step 12– Complete information below:
> Upload a authorization .cer
> Put Friend name
> Select template
> Click ok
Página 5 de WINSERVER

6. Step 13– Return IIS Default Web Site
> Click in Binding
Step 14– Edit Click Add
> add Https / 443 port
> Click in Edit
Página 6 de WINSERVER

7. Step 15– Edit Site Bind
> Select Cert athority response ( Last Friendly Name)
> All Unassigned
> Click OK
Step 16– Validate SSL Local Server Status
> Verify 443 SSL port at Windows server 2016
> netstat –an | find “:443”
Type HTTPS://www.ccie.lab
And Open works with no certificate restrictions
Página 7 de WINSERVER