DETAIL

Below are the steps to configure SSL for Enterprise Vault Virtual Directories in Windows Server 2008.

Settings in EV Site properties.

Change in vault site to access web access application using HTTPS, select the option 'use HTTPS ON SSL port 443' . 443 is the default port used for HTTPS,  You can specify a different SSL port if required.

 

Certificate Signing Request (CSR)  

The first step in ordering an SSL certificate is generating a Certificate Signing Request(CSR). Click on the Start menu, go to Administrative Tools, and click on Internet Information Services (IIS) Manager. Click on the name of the server in the Connections column on the left. Double-click on Server Certificates

 



In the Actions column on the right, click on Create Certificate Request...

 

Enter all of the following information about your company and the domain you are securing and then click Next

 

Leave the default Cryptographic Service Provider. Increase the Bit length to 2048 bit or higher. Click Next.

 

Once you have generated a CSR you can use it to order the certificate from a certificate authority (Ex:-godaddy, VeriSign). Once you paste the contents of the CSR and complete the ordering process, your order is validated, and you will receive the SSL certificate file.

To install your newly acquired SSL certificate in IIS 7, first copy the file somewhere on the server and then follow these instructions:

Click on the Start menu, go to Administrative Tools, and click on Internet Information Services (IIS) Manager. Click on the name of the server in the Connections column on the left. Double-click on Server Certificates. In the Actions column on the right, click on Complete Certificate Request

 

If successful, you will see your newly installed certificate in the list. If you receive an error stating that the request or private key cannot be found, make sure you are using the correct certificate and that you are installing it to the same server that you generated the CSR on. If you are sure of those two things, you may just need to create a new Certificate Request and reissue/replace the certificate. Contact your certificate authority if you have problems with this.

 

In the Connections column on the left, expand the sites folder and click on the website that you want to bind the certificate to. Click on Bindings... in the right column. Then Click on the Add... button

 

You will now see the binding for port 443 listed. Click OK,  Close.