SSL Set up on Windows IIS 10 – Support

This article will detail the steps for obtaining an SSL on a Windows IIS 10 Server server using a Certificate obtained through No-IP.

Obtain an SSL Certificate

Customers with Enhanced, Plus, or Pro are entitled to at least, one free No-IP Vital Encrypt DV SSL Certificate. If you need additional certificates you can purchase one from here. If you need help purchasing your SSL check out this guide.

Generate a CSR

Go to start > Run > MMC > File > Add / Remove Snap-In > Certificates > Add > Computer Account > Local Computer > Select Certificates then OK > Open the “Personal” dropdown > Right click Certificates > All Tasks > Advanced Operations > Create custom request > Next > Click “Proceed without enrollment policy” then Next > No Template CNG key under the dropdown select PKCS #10 then Next > Click on “Details” then Properties > Click on the “Subject” tab

You will need to select these types on the dropdown on the left, add the value then add it to the right side.

Country (2 letter code): US

State (full name): Your State (or Province)

Locality (eg, city): Your City

Organization Name (eg, company): Your Company Name

Organizational Unit Name (eg, section): IT

Common Name (eg, YOUR domain name): yourdomain.com

Email: youremail@youremail.com

Alternative Names is optional

After you’re done click on the Private Key tab make sure the key size is 2048. Make the private key exportable, and select sha256 as the hash algorithm > select where you want to save it > select base 64 then Finish.

Submit the CSR

Now that the CSR has been created open the file, and copy the entire contents.

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

Locate your SSL and click the Add CSR button.

Here, you will choose your server type from the drop down menu, paste the CSR we just copied, then click the green “Add CSR” button to continue.

Fill in the information required. The City, State and Country will be auto-filled from the information generated in the CSR you created. Click the green Confirm button when finished.

Domain Verification

If your domain is managed by us (one of our hostnames or your own custom domain with Plus or Pro), we will add the DNS Verification TXT record automatically.

If your domain is not managed by No-IP, you will need to copy and paste the this value and add it as a TXT record manually with your DNS provider.

Click the Continue button once you have reviewed and/or copied this information.

After about 30 minutes, TXT record will be verified and the Status will change to Active.

Download the Certificate

After verification is complete. From your No-IP account, click My Services at the left, then SSL Certificates. Find your SSL and click the Download button.

Here, use the dropdown menu to select the file type and click the Download button to obtain the file. (We recommend the pem-chain file)

Installation

Our certificate provider has an extensive knowledge base with instructions on installing your new certificate.