【環境】
● work system:Windows Server 2019
● website platform:IIS 10
● voucher website:ZeroSSL.com (Let’s Encrypt)
【step – Generating a CSR]
◎ open IIS,After selecting the local server,Double-click the "Server Certificates"。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-14_53_54-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
◎ right-click in the blank,Or "established credentials required" field select the right action。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-14_54_40-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
◎ "common name" Please enter the correct URL,The remaining fields to fill in, as the case。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-14_55_45-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
◎ accordance "Chinese InternetTeaching Help "of,The current certificate will be required bit length”2048″(Default is 1024)。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-14_58_09-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
◎ select the storage location of the file to be generated CSR。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-14_58_54-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
【step – Application Voucher
◎ open ZeroSSL.com,Click on "ONLINE TOOLS"。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-17_08_43-Free-SSL-Certificates-and-Free-SSL-Tools-@-ZeroSSL-Zero-cost-SSL.png)
◎ in FREE SSL Certificate Wizard Click "START"。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-17_09_07-Free-SSL-Certificates-and-Free-SSL-Tools-@-ZeroSSL-Zero-cost-SSL.png)
Email and left side of the screen ◎ Let's Encrypt Key optionally filled,Can not fill。
◎Make sure the right screen before the paste steps generated CSR file content,If you just enter Domains,Make your site generate its own CSR,It will be imported when IIS,The problem occurs。
◎ lower left corner of authentication,The actual situation choose to follow,I use DNS。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-17_11_57-Free-SSL-Certificate-Wizard-and-other-SSL-Tools-@-ZeroSSL.png)
This step is ◎ through DNS verification screen,The value can be added to DNS。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-17_17_40-Free-SSL-Certificate-Wizard-and-other-SSL-Tools-@-ZeroSSL.png)
After completion ◎,You can download the certificate file(domain certificate)。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-17_19_46-Free-SSL-Certificate-Wizard-and-other-SSL-Tools-@-ZeroSSL.png)
※ This is a step I had to use SSL For Free Of service,But in that period of import CSR,CSR's website has been said that I have a problem,So finally had to switch to normal before ZeroSSL。
【step – Import Certificate]
◎ IIS into a "server certificate" screen,Right click select "complete certificate requirements."。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-15_17_46-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
◎ select the file you just downloaded certificate,And give a name。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-15_19_57-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
◎ after completion certificate can see details。
◎ suggestions by clicking refresh(F5),Look at the credentials will not go away,If you apply the steps in front of the voucher is not labeled CSR IIS generated,After the refresh will disappear。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-15_20_44-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
【step – Use Voucher
◎ select the destination site,Press the right of "tying"。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-15_21_39-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
◎ Select "Add"。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-15_22_19-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
◎ selection “https”,Import “Host Name”,Finally, just select import certificate,Press OK to complete。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-15_52_50-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
[Side story – Website only limited use https]
◎ select the destination site,Click "SSL Settings"。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-15_54_09-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
◎ Check the "Require SSL",Then press the right action window 'Apply' to。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-02-15_54_54-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
[Side story – http automatically transferred https]
◎ select the destination site,Click "Error pages"。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-03-15_15_19-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
◎ right-click in the blank,Or select "New" in the action field to the right。
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-03-15_15_56-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7-1.png)
◎ In the "status code" input “403.4”。
◎ Select "response 302 Redirect "。
◎ in "absolute URL" enter the URL with https,Then press "OK" to
![](https://it-help.tips/wp/wp-content/uploads/2020/03/2020-03-03-15_16_36-XD-Portal-19-172.20.8.234-Remote-Desktop-Connection-Manager-v2.7.png)
【參考連結】
- Chinese Internet: Teaching SSL certificate file
- Free SSL Certificates and Free SSL Tools @ ZeroSSL – Zero cost SSL
- IIS HTTP forced to turn HTTPS simple approach-Dark thread