Page Comparison

...

1. Download win-acme

2. Extra the zip

3. From the win-acme extracted directory open settings_default.json in your favorite text editor

4. Find PrivateKeyExportable and change the value from false to true

5. Copy the contents of the extracted directory to a permanent location such as C:\Program Files\win-acme

Create the Certificate

1. Run wacs.exe with admin privileges from the permanent location

2. M - Create certificate (full options)

3. 2 - Manual input

4. Enter the server’s public FQDN (ex: myserver.myorg.com)

5. Friendly name: Enter the server’s public FQDN (ex: myserver.myorg.com) The default name has “[Manual]” which will cause issues.

6. 4 - Single certificate

7. 2 - [http] Serve verification files from memory

8. 2 - RSA

9. 4 - Windows Certificate Store (Local Computer)

10. 2 - [My] - General computer store (for Exchange/RDS)

11. 5 - No (additional) store steps

12. 1 - Create or update bindings in IIS

13. 1 - Default Web Site

14. 3 - No (additional) installation steps

15. N - Open in default application

16. Y - Do you agree with the terms

17. Enter an email address for notifications about problems and abuse

18. Y N - Do you want to specify the user the task will run as

    Use a local administrator account. The default is System. When the task runs as System the private key is not exportable.

19. Q - Quit

At this point, the certificate should be in the server's certificate store and an IIS binding for port 443 using the certificate and the host name should have been created. The certificate will be setup to auto renew every 30 days.

...