How to create a self-signed cert via IIS

SSL (Secure Sockets Layer) plays a crucial role in establishing trust and ensuring a secure environment for online interactions, especially for sensitive transactions. Among the various web servers, Microsoft’s Internet Information Services (IIS) stands as a robust platform, and understanding how to create a self-signed certificate within its framework is a valuable skill.  Note that while a self-signed certificate is suitable for certain purposes, it is not recommended for sites dealing with sensitive information like e-commerce or financial transactions. See Internet Information Services: How to install Web Server in Windows Server 2019 and TLS/SSL Certificates: Secure Web Server on Windows.

Here are other related guides: How to install Let’s Encrypt Certificates with IIS on a Windows Server, How to add and remove IIS Web Server on Windows Server 2019 via the Server Manager and PowerShell, How to install and configure an FTP Server on Windows Server, and How to install and configure an FTP server on Windows 10.

Step-by-Step Guide to Create a Self-signed Cert in IIS

Step 1: Press the Windows key to open the Start menu and search for ‘Internet Information Services (IIS) Manager.’ Open the IIS Manager as administrator to access server configurations.

Step 2: In the IIS Manager, click on the server name in the left column under Connections. Then, double-click on “Server Certificates,” to access the server certificates management section.

Step 3: Click on “Create Self-Signed Certificate” in the Actions Column on the right.

Step 4: Provide a clear and identifiable name for your certificate, then click OK to proceed.

Step 5: Click OK to confirm. After completion, the SSL certificate will appear in the list of Self-Signed certificates. You have activated your IIS Self-Signed Certificate, and it now has a validation period of 1 year.

Conclusion

By diligently following the above steps, you have successfully created a Self-Signed Certificate in IIS. While this is suitable for certain scenarios, remember to avoid using self-signed certificates for sites handling sensitive data.

For enhanced security in such cases, consider obtaining a certificate from a trusted certificate authority.

I hope you fund this article useful. Please feel free to leave a comment below.