...
Identify the Certificate Authority (CA) - If you need to setup Microsoft Certificate Services the following link may:
Install the Certificate - Request and install a certificate for the website under which the application will run. See: How to Get a Certificate from an internal CA
The certificate must be created for a website (ex: Default Web Site) not the virtual directory for the web application.
A Bit length of 2048 is recommended.
Select SHA256 for your hash algorithm.
See this Microsoft KB article for more information: http://support.microsoft.com/kb/299875
| Note |
|---|
If an internal certificate authority (CA) is being setup it is strongly advised to configure Certificate auto-enrollment so that the issued certificates will auto-renew rather than expire. |
IIS Configuration
Binding
Add an https site binding
...