Installing an SSL Certificate Manually


Using HTTPS for production websites relies on trusted public key certificates that are issued by certificate authorities (CA). Using HTTPS to connect to a website running in IIS Express will fail when the certificate has expired or has been improperly installed.

Generally, the root certificates for SSL should already be pre-installed on a Windows machine. So, a manual root certificate import may only be needed if the root certificate was removed intentionally. This document will provide step-by-step instructions on how to install SSL certificates manually.

Step 1: Open Microsoft Management Console

  • Right-click on ‘Start’ and select “Run” (or press ctrl + R)

  • Type in ‘MMC’ and click “OK”

  • On the User Account Control screen click “Yes”

  • The following screen should be displayed

Step 2: Create the Certificate

  • Click “File” and select “Add/Remove Snap-in”

  • In the left menu select “Certificates” and click “Add”

  • On the next screen click the radio button next to “Computer account” and click “Next”

  • Click “Finish” and you should be returned to the “Add or Remove Snap-ins” screen. Click “OK” to visit “MMC”

Step 3: Export the Certificate

  • In the Microsoft Management Console window go to Certificates by expanding “Certificates (Local Computer)” >> “Trusted Root Certification Authority” >> “Certificates”

  • Right-click on “localhost” and navigate to “All Tasks” >> “Export”

  • Inside the “Certificate Export Wizard”, keep the default settings and click “Next” until you have to select the export path. Select a location to save the certificate that will be used in Step 4. Click “Next”.

  • Click “Finish” and close the “MMC” without saving console settings.

Step 4: Install the Certificate

  • You should see a Security Certificate file (.cer) in the location provided in Step 3. Open it and click “Install Certificate”

  • Select “Local Machine” and click “Next”

  • Select “Automatically select the certificate based on the type of certificate” (default setting) and click “Next”

  • Click “Finished”

  • A message showing that the import was successful will now be visible. The SSL certificate is now installed.

  • Restart the browser and open the site again. The connection should be secured.

  • In case the connection is still showing insecure, open the site in incognito mode or clear the cache of the browser.

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.