How to Install Wildcard SSL Certificate on IIS 7, 8, or 10 Windows Server?

Did you purchase the Wildcard SSL Certificate? Then you might be pretty curious to learn how you can properly get it installed in Microsoft IIS Windows servers.

Whether you have already used the Wildcard Certificates before or you’re a complete beginner, in this post, you will provide information on how to install them into an IIS 7, IIS 8 or IIS 10 Windows server.

What is a Wildcard SSL Certificate & Why Do You Need One?

The Wildcard SSL certificate is a subdomain SSL certificate with a wildcard character (*.yourwebsite.com) in the domain section. The certificate can protect all the subdomains under one domain on multiple servers.

When the clients take a look at the name of the subdomain under this certificate, he/she utilizes a shell expansion procedure to check whether or not it matches appropriately.

When you have subdomains and wish to utilize HTTPS on the IIS windows server, the Wildcard SSL certificate will be worth opting for, especially for ease of implementation and cost.

Steps for Installing a Wildcard SSL Certificate on IIS 7, 8 and 10 Windows Servers

Step 1: Generate a CSR for a Wildcard Certificate

• Open IIS Manager
• Click the server name in the left panel
• Double-click Server Certificates

• Click Create Certificate Request…

• Enter details:
  • Common Name: *.example.com
  • Organization, City, Country, etc.

• Choose:
  • Cryptographic Service Provider: Default
  • Bit length: 2048

• Save the CSR file

Submit this CSR to a Certificate Authority and complete the validation process (which is usually done via DNS-based validation for wildcard certificates).

Step 2: Copy Certificate Files to the Server

When you have obtained your certificate, make sure to copy the following items onto your server:

• Wildcard certificate file
• Intermediate certificate bundle (CA bundle)

You should place the two files above in a known location on your computer (for example): C:\SSL\

Step 3: (Optional but Recommended) Import Intermediate Certificates

• Press the Windows Key + R to launch the Run dialog.
• Type mmc in the Run dialog and hit Enter.
• Select Add/Remove Snap-in from the File menu.
• Select the Certificates Snap-in by clicking on the Add button located next to it.
• Choose Computer Account and select Local Computer from the options provided.

Expand:
Certificates (Local Computer) & Intermediate Certification Authorities

• Right-click on the Inter certificate from the local machine, point to All Tasks, and then point to Import.
• Import the Intermediate Certificate in either p7b or cer format.
• Complete the wizard on how to do this.

Now you will have a complete Trust Chain to validate everything is okay on your website!

Step 4: Install the Wildcard SSL Certificate in IIS

• Open IIS Manager
• Select Server Name
• Double Click on Server Certificates
• Click on Complete Certificate Request from the actions menu.
• Browse for your Wildcard Certificate and select it.
• Enter a Friendly Name like: *.example.com (Wildcard SSL)
• Select Web Hosting for Certificate Store
• Click on OK
• Your Certificate will now be listed under Server Certificates

The certificate should now appear in the Server Certificates list.

Step 5: Bind the Wildcard SSL Certificate to Your Website

• Open your IIS Manager and click on “Sites“
• Then click on the site you wish to secure.
• From the “Actions” panel on the right, click on “Bindings…”
• Click the “Add” button (or Edit) on existing HTTPS binding.
• Configure:
  • Type: https
  • IP Address: All Unassigned
  • Port: 443
  • Host name: Leave empty or enter a specific subdomain if using SNI
  • SSL Certificate: select the wildcard certificate you created earlier
• If you are hosting multiple HTTPS sites then check “Require Server Name Indication (SNI)”.
• Click OK then Close.

Step 6: Use the Wildcard Certificate on Multiple Sites (Optional)

You can use the Wildcard SSL Certificate on:

• Multiple IIS sites
• More than one subdomain on the same IIS server

For this to happen for each site, go through step 5 again and put in the right hostname for each site if necessary.

Step 7: Restart IIS

To restart IIS:

• Select the website.
• Use the Restart option located within the Actions panel.

Or

• Run the iisreset command from an elevated command prompt.

Step 8: Verify Installation

• For Browser Test Visit: https://subdomain.example.com
• You should see:
  • A secure padlock

  • No certificate warnings

The Bottom Line

Installing a Wildcard SSL certificate on IIS 7 or 8 is straightforward and relatively easy. After purchasing the certificate from a trusted provider, the process can be completed in a few steps without technical knowledge.