Migrating Server Certificates for SSL

  • Article

Applies To: Windows Server 2003, Windows Server 2003 with SP1

If you use Secure Sockets Layer to encrypt confidential information exchanged between the Web server and the client, you must migrate the server certificate from the source server to the target server, install the certificate on the target server, and then configure the Web site to use the certificate.

Note

Server certificates are installed on the Web server and typically require no additional configuration on client servers. Server certificates allow clients to verify the identity of the server. Alternatively, some Web sites and applications might require client certificates. Client certificates are installed on the client servers and allow the server to authenticate the clients. For more information about configuring client certificates, see Certificates_IIS_SP1_Ops.

Migrate the server certificate for Secure Sockets Layer (SSL) by completing the following steps for each Web site and application that uses SSL:

  1. Export the server certificate for the Web site from the source server.

    For more information about exporting a server certificate, see Export a Server Certificate.

  2. Install the server certificate to be used by the Web site on the target server.

    For more information about installing the server certificate on the Web server by using the Certificate MMC snap-in, see Install a Server Certificate.

  3. Assign the server certificate to the Web site.

    For more information about assigning the server certificate to the Web site, see Assign a Server Certificate to a Web Site.