After installing the Web server certificate into Microsoft IIS, you must update the HTTPS site binding for the Web server in Microsoft IIS to use the TLS certificate.

To add an initial HTTPS site binding in Microsoft IIS to use the Web server certificate

  1. Open IIS Manager. Select Start > Windows Administrative Tools > Internet Information Services (IIS) Manager.
    The Internet Information Services (IIS) Manager dialog box appears.
  2. In the Connections pane, select Sites > Default Web Site.
    The Certificate Enrollment Policy Web Service will be installed as an application under the default Web site.
  3. In the Actions pane, click Bindings.
    The Site Bindings dialog box appears. 
  4. Click Add.
    The Add Site Binding dialog box appears.
  5. In the Type drop-down list, select https.
  6. Keep IP address as All Unassigned.
  7. For Port, keep the default 443.
  8. From the SSL certificate drop-down list, select the Web server certificate you installed into Microsoft IIS earlier.
  9. Click OK.
    The HTTPS binding is added to the list of site bindings.

To update an existing HTTPS site binding in Microsoft IIS to use the Web server certificate

  1. Open IIS Manager. Select Start > Windows Administrative Tools > Internet Information Services (IIS) Manager.
    The Internet Information Services (IIS) Manager dialog box appears. 
  2. In the Connections pane, select Sites > Default Web Site.
    If the Certificate Enrollment Policy Web Service is installed, it appears as an application under the default Web site.
  3. In the Actions pane, click Bindings.
    The Site Bindings dialog box appears. 
  4. Select the https binding for port 443.
  5. Click Edit.
    The Edit Site Binding dialog box appears. 
  6. From the SSL certificate drop-down list, select the Web server certificate you installed into Microsoft IIS earlier.
  7. Click OK.