Self Signed Certificates

1. Add the CA to your server.

2. Have IIS and the default website (or whatever name) DS tab issue a cert request and hold.

3. Use browser and got to server/certsrv and add the cert request, Advanced, and the long option in the middle. The the CA will issue.

4. Back to IIS and apply the cert.

Note length of cert expiration is 1 or 2 years, but can extend by editing registry for ValidPeriodUnits (and pick period like year) (see MS kb 254632)

5. For port 443 etc click Authorization and selected secure and 128 bit

See this:

http://www.msexchange.org/tutorials/ssl_enabling_owa_2003.html

and

http://www.petri.co.il/configure_ssl_on_your_website_with_iis.htm