Page Comparison

...

1. Download win-acme

2. Extra the zip

3. Copy the contents of the extracted directory to a permanent location such as C:\Program Files\win-acme

4. Run wacs.exe with admin privileges from the permanent location

5. M - Create certificate (full options)

6. 2 - Manual input

7. Enter the server’s public FQDN (ex: myserver.myorg.com)<Enter> -

8. accept Friendly name: Enter the server’s FQDN as the friendly namepublic FQDN (ex: myserver.myorg.com) The default name has “[Manual]” which will cause issues.

9. 4 - Single certificate

10. 2 - [http] Serve verification files from memory

11. 2 - RSA

12. 4 - Windows Certificate Store (Local Computer)

13. 2 - [My] - General computer store (for Exchange/RDS)

14. 5 - No (additional) store steps

15. 1 - Create or update bindings in IIS

16. 1 - Default Web Site

17. 3 - No (additional) installation steps

18. N - Open in default application

19. Y - Do you agree with the terms

20. Enter an email address for notifications about problems and abuse

21. N - Do you want to specify the user the task will run as

22. Q - Quit

23. Edit C:\Program Files\win-acme\settings.json

24. Change PrivateKeyExportable from false to true

25. Save

26. Run wacs.exe with admin privileges from the permanent location

27. A - Manage renewals

28. S - Run the renewal (force) This forces the certificate to be re-created with an exportable key

29. Q - Quit

At this point, the certificate should be in the server's certificate store and an IIS binding for port 443 using the certificate and the host name should have been created. The certificate will be setup to auto renew every 30 days.

...