SYSTEM ADMIN BOOK
  • Hardware/Physical Machines
    • Physical Networking
      • Patch Panel
    • Hardware Devices
    • PC Build
  • System Configuration
    • Windows
      • OneDrive for Business, Map as Network Drive in Windows
      • PDF Printer
      • Reset Windows Password
    • Linux
    • Mac
      • Factory Reset Mac Mini
      • Install FortiClient VPN
      • Remove FortiClient VPN for Macs
      • Setting Microsoft Teams Notifications in MacOS
      • Download and Install Whatsapp
  • Windows Server
    • Basic Configurations
      • Change Hostname
      • Change Default RDP Port
      • Create a User
      • Add user to Administrator group
      • Add user to Remote Desktop Users group
      • Allow Multiple Remote Desktop Connections
      • Enable Insure Guest Authentication
      • Shrink Partition
      • Extend Partition
    • FTP Server
      • Install FTP Server (IIS)
      • Create User Group
      • Add FTP Site (IIS)
      • User Isolation
      • Allow Firewall
      • FTP Client (FileZilla)
      • FTP Server (FileZilla)
    • Group Policy
      • Block Access to the Control Panel for All Users
      • Create a Logon Banner (Legal Notice)
      • Enable / Disable Copy-Paste Policy
      • Disable Shutdown, Restart Options
      • Disable Multiple Session for Single User
    • Services
      • NSSM - the Non-Sucking Service Manager
    • Task Scheduler
  • Control Panels
    • Plesk
      • Set Hard Quota on disk space for subscription(s)
      • Changing MX, A, and CNAME Records
    • SolidCP
    • cPanel
  • Virtualization
    • Proxmox VE
      • Introduction
      • Download Proxmox ISO
      • Prepare Installation Media
      • Launch Proxmox Installer
      • Create a VM
  • Web Servers
    • IIS
      • Install IIS
      • Configure Default Site
      • Application Pool
      • Installing PHP
      • Deploying a Laravel app on Windows using IIS
      • Update PHP Version in IIS
  • VPN/Proxy Servers
    • Reverse Proxy
      • IIS - Node.js Application
  • Database Servers
    • MS SQL
      • Download and Install
      • Install SSMS
      • Enable SA Account
      • Change SA Account Password
      • Enable Network Access to SQL Express
      • Create and configure a user in MSSQL
  • Web Dev Stacks
  • IT Ticketing Systems
    • Jira Ticketing System
  • Linux Servers
  • AWS Environment
  • Azure Environment
  • Backup and Security
    • SSL Certificates
      • Types of SSL Certificates
      • IIS 10: Create CSR and Install SSL Certificate
      • IIS 7: Generate CSR for Wildcard SSL
      • IIS: Generate CSR for Multi-Domain SSL
      • OpenSSL: Generate CSR
      • IIS 10: How to Install and Configure Your SSL Certificate on Windows Server
      • IIS: Export Pfx using MMC
      • IIS: Import Pfx using MMC
      • IIS: Export Pfx using IIS Manager
      • IIS: Import Pfx using IIS Manager
      • cPanel: Export PFX
      • Godaddy-CPanel: Generate a CSR
      • Godaddy-CPanel: Install SSL Certificate
      • cPanel: Generate CSR
      • cPanel: Install SSL Certificate
      • cPanel: Install Let's Encrypt SSL
      • Plesk: Generate CSR
      • Plesk: Let's Encrypt SSL Installation
      • Plesk: Installing the SSL certificate
      • Plesk: Export Public & Private Key
      • Win-ACME Let's Encrypt SSL
      • Certbot - Install SSL
      • Export Leaf, Root, and Intermediate Files
    • Backup
      • Database
        • MS SQL DB Backup
        • MS SQL Restore Backup
    • Microsoft Defender for Endpoint
      • Introduction & Licenses
  • Email and Office 365
    • Troubleshooting
      • Run a message trace in the Exchange admin center
      • Not receiving email
      • Office 365 Apps Activation Error
    • Mail Clients
      • Outlook
        • Maximum number of Exchange accounts in an Outlook profile
        • Enable automatic forwarding in new Outlook
        • Add Email Signature
        • Create Email Singature
        • Gmail Account Login in Outlook
      • Apple Mail
        • Add email accounts in Mail on Mac
        • Add Mail Signatures
    • Office 365
      • Intro & Subscriptions
      • How to Create a Trial Account
      • How to Access the Office 365 Admin Center
      • Creating a Tenant
      • Create Users
      • Creating & Managing Roles
      • Add a Domain
      • Manage MFA
      • Assign Global Admin Roles
      • Create APP Password
      • Change a user name and email address
      • Reset MFA for Microsoft 365 User
      • Configure email forwarding
      • Add email aliases to a user
      • Change Username or Email Address
    • Google Workspace
      • Intro & Plans
      • Create your Google Workspace trial account
      • Review your DNS records
      • Adding Users
      • Create organizational units
      • Restrict access to a Google Workspace service
      • Edit user attributes
      • Manage user accounts
      • Suspend a User
      • Generate a Transfer Token
      • Reduce Licenses in Google Workspace
    • MailEnable
    • SmarterMail
      • SmarterMail Installation
      • SmarterMail Server Setup
      • Installation and Configuration (Practical)
      • Enable / Disable Domain in SmarterMail
    • Microsoft Teams
      • Guest Access vs. External Access
      • Adding Guests To Microsoft Teams Team
      • Teams Chat DIfferent Domain: Enable External Access
      • Setup Teams Time Zone and Work Hours
    • Microsoft Defender for Office 365
  • DevOps
  • Firewalls
  • Networking
    • Cisco Router Config
    • Cisco Switch Config
      • Basic Data and Voice VLAN Setup Homelab
  • Migration
    • Drive Migration
      • Google Drive to One Drive
    • Mail Migration
      • Google Workspace to Office 365
      • IMAP to Office 365
      • Migration Using PST File Method
    • VM Migration
    • Website Migration
    • Database Migration
  • Monitoring
    • Prometheus
      • Monitoring Windows Servers Using Prometheus
    • Grafana
      • Visualize Data in Grafana
    • Loki
  • Data Center
  • Other Technologies
    • Some R&Ds
Powered by GitBook
On this page

Was this helpful?

  1. Backup and Security
  2. SSL Certificates

Certbot - Install SSL

PreviousWin-ACME Let's Encrypt SSLNextExport Leaf, Root, and Intermediate Files

Last updated 1 month ago

Was this helpful?

Install with Certbot

  1. Download the latest Certbot installer for Windows from the official website.

  2. Open the installer, and follow the installation wizard steps.

  3. Open the Windows Start Menu and launch Windows PowerShell as an Administrator.

  4. Enter the following commands to request a free Let's Encrypt SSL certificate. Replace example.com with your actual domain.

     PS> certbot -d example.com -m admin@example.com --agree-tos --webroot

    Enter the path to your domain files directory created earlier. For example, C:\inetpub\example.com.

    Certbot stores your SSL certificate in the installation directory's live folder and automatically renews it before the certificate expiry date. Certbot generates and saves SSL certificates as .pem files. However, the IIS certificate store requires the .pfx format. Convert your Certbot certificates using OpenSSL and bind them to your domain, as explained in the following steps.

  5. Download the latest OpenSSL installation file from an official download link.

  6. Run the installer and follow the wizard steps to install OpenSSL.

  7. Open Windows PowerShell and switch to the OpenSSL program directory. For example, if installed in program files, run the following command.

     PS> cd "C:\Program Files\OpenSSL-Win64\bin"

  8. Enter the following commands to convert your Certbot certificates to the .pfx format.

     PS> .\openssl.exe pkcs12 -export -out C:\Certbot\live\example.com\certificate.pfx -inkey C:\Certbot\live\example.com\privkey.pem -in C:\Certbot\live\example.com\fullchain.pem

  9. Enter a strong password to secure your certificate file.

  10. Open the IIS Manager.

  11. Navigate to your Windows server hostname under the Connections navigation bar.

  12. Double click to openServer Certificates.

  13. Click Import from the right Actions navigation bar.

  14. Enter the path to your .pfx certificate file, or click ... to browse the directory.

  15. Enter the certificate file password created earlier.

  16. Click OK to import your SSL certificate file.

  17. Navigate to your domain under the Sites subgroup on the left navigation bar.

  18. Find and click Bindings under Edit Site on the right navigation bar.

  19. In the open Site Bindings window, click Add.

  20. Toggle Type: and select https from the drop-down options.

  21. Keep 443 as the Port:, and enter your domain in the Hostname: field.

  22. Check and activate Require Server Name Indication.

  23. Select your imported certificate from the SSL Certificate: drop-down list.

  24. Click OK to save changes and close the Site Bindings window.

You have successfully installed your SSL certificate, visit the domain in a web browser to confirm the access is secure. For example, navigate to https://example.com and verify the certificate is correct.