When Remotely Managing IIS the "Server Certificates" button is missing

The Senate

10/30/23, 7:05 AM

This question is very similiar to this

In sumary you need local access to the server or RDP into it, but because I'm running a "domained" Server Core how do I install a SSL certificate?

Is it better to install the AD CA role, or is it possible install the certificate locally and how?

Thanks for the help :)

EDIT

After a more carefull analysis the CA of my SSL Certificate (ZeroSSL) only a provides a .Zip file, containing 2 .cert and 1 .key files, and Windows requires a .PX12 file certificate, so a conversion is needed, and to do that here's the link.

This question is still opened

150

1 + 0

iis

windows-server-core

ssl-certificate

Score:0

Server

Lex Li

10/30/23, 6:01 PM

A certificate can be requested and installed on any machine. Then, export it as a .pfx file and install it on any other machines you want.

You only need AD CA if you want to issue internal certificates for all users/machines in this domain. If you actually want to use self-signed or certificates issued by external CAs, then AD CA is irrelevant.

+ 3

The Senate

10/30/23, 9:45 PM

But the problem is that IIS doesn't allow to add certificates directly, and there's literally no direct access to IIS Manager on the local server because it's a Server Core version

Lex Li

10/31/23, 1:24 AM

@TheSenate No. You don't have to use IIS Manager to configure certificates for HTTPS sites. Deep down inside, everything is configured via Windows HTTP API, so command line tools like `netsh` https://learn.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-configure-a-port-with-an-ssl-certificate or related PowerShell cmdlets can be used, https://learn.microsoft.com/en-us/powershell/module/iisadministration/?view=windowsserver2022-ps. I will suggest PowerShell as it works everywhere.

The Senate

11/7/23, 7:12 AM

Thanks for the help those commands did the trick. I have just one more question: When I import the .PX12 to the server it requests a password, that I set during the conversion process (used OpenSSL), it keeps on failing. But when I try it on a Windows 10 machine it works no problems. Got any clues?

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: When Remotely Managing IIS the "Server Certificates" button is missing

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.