How to Request and Install an IIS TLS Certificate Print

Applies to: Windows Server 2019, Windows Server 2022, and Windows Server 2025.

This workflow enrolls a server certificate, verifies its identity fields, and binds it to an IIS HTTPS endpoint.

Prerequisites

• Administrative access to the affected servers.
• A verified backup and approved maintenance window.
• A pilot system for testing before production rollout.

Step-by-step procedure

1. Confirm the public hostname and DNS ownership.
2. Generate a request with the approved template.
3. Install the issued certificate in Local Computer Personal.
4. Bind the thumbprint to the correct IIS site and hostname.

Commands

Get-Certificate -Template "WebServer2025" -DnsName "www.contoso.example" -CertStoreLocation Cert:\LocalMachine\My
Get-ChildItem Cert:\LocalMachine\My | Sort NotAfter -Descending
Get-WebBinding -Protocol https

Verification

A remote TLS client receives the expected certificate chain, hostname, and valid dates.

Rollback

Restore the former IIS binding and certificate thumbprint, then remove the unused test certificate.

Security and operations

• Use least privilege and document all production changes.
• Replace example addresses and names with approved values.
• Review relevant Windows event logs after implementation.

Related resources

Canadian Windows VPS and RDS hosting is available from networkmanager.info. Also review the official Microsoft Windows Server documentation.