IIS中的SSL Certificate 证书配置

座机

　　一，关于证书的安装：
　　1. 如果已有通用证书，则直接导入即可，步骤是：IIS根目录->Server Certificates->Import

　　2. 如果要申请创建新的通用证书，可以网上搜索申请步骤，这里不讨论。

　　3. 如果是本地环境，则可以创建自签名证书，方法很简单：IIS根目录->Server Certificates->Create Self-Signed Certificate。

　　二，应用证书开启https连接
　　在需要开启https连接的站点里进入Bindings选项设置即可，如果一台Server有多个站点需要https的话，必须要绑定Host Name，否则会有端口冲突。但这里有个问题就是，如果你用的是自签名证书的话，在Bindings里设置https选项时，发现Host Name一项是冻结的，怎么办呢？这里有个简单的方法：
　　摘自：http://blog.armgasys.com/?p=80

　　Instructions

• Open Internet Information Services (IIS) Manager
  
• Edit the Site Bindings for the website you which to assign an SSL certificate to        
  (right click, select Edit Bindings
  
• Select the HTTPS port and select Edit
  
• Note that the Host Name (Host Header) field is unavailable for editing   
  
• Launch the Microsoft Management Console (MMC)
  
  
  • Select Start –> Run
    
  • Type in “MMC” and hit enter
    
  • From the console, select File –> Add / Remove Snap-in
    
  • Select Certificates from the Add / Remove dialog
    
  • Select Computer Account when prompt for which certificates the snap-in will manager.
    
  • Select Local Computer when prompted
    
  • Click OK to add the Snap-in to the MMC
    
  
  
• Locate your SSL certificate
  
  
  • For self-signed (SELFSSL), look in Personal
    
  • For installed / purchased, look in the appropriate folder the certificate was originally installed in
    
  
  
• Right click on the certificate and select properties
  
• Edit the Friendly Name field so the name starts with an *      
  
  
• Repeat steps #1 – 3 above      
  Note that the Host Name (Host Header) field is now available for editing   
  

　　有关MMC的更多知识，参考：http://baike.baidu.com/view/115504.htm