Renew or Upgrade Your SSL Certificate using IIS 5 & IIS 6

IIS 5 & 6 have a Renew the current certificate option in the Server Certificate wizard. This option can only be used for renewing certain types of certificate. Please refer to the below table on whether you can use the Renew the current certificate option in IIS.

Note: If you are upgrading a valid Verisign or Thawte certificate to a GeoTrust certificate then you CANNOT use the Renew the current certificate option in either IIS 5 & 6.

We have two sets of instructions below -
A. users who can use the Renew Certificate option in IIS
B. users who cannot use the Renew Certificate option in IIS.

A. Instructions for users who can use the Renew Certificate option in IIS:

1. In the Properties of your web site, select Directory Security, then click the Server Certificate button. Select Renew the current certificate and click Next.

2. At the end of the wizard you will be provided with a CSR. Take the CSR and enter it into the relevant text box in the GeoTrust SSL certificate enrollment process. When enrolling in the GeoTrust web forms, you will be asked whether the certificate is a renewal. Make sure you select Yes - this will provide you with the special renewal pricing and extra months (if applicable).

3. GeoTrust will issue your SSL certificate and return it to you by email. Copy the certificate into a text editor such as notepad and save as yourdomain.cer.

4. Return to the Directory Security tab of your site and click Server Certificate and follow the on screen wizard:
   • Ensure that you select Process the pending request and install the certificate. Click Next.
   • Locate the yourdomain.cer file when prompted to locate your webserver certificate. Click Next.
   • Review the summary screen and ensure that you are processing the correct certificate. Click Next.
   • Click Next and then Finish on the confirmation screen.

Your certificate has now been renewed.

B. Instructions for users who cannot use the Renew Certificate option in IIS:

1. You will first need to create create dummy site (a temporary site). When you have created the dummy site, select Directory Security, then click the Server Certificate button.

2. In the wizard select Create a new certificate.

2. At the end of the wizard you will be provided with a CSR. Take the CSR and enter it into the relevant text box in the GeoTrust SSL certificate enrollment process. When enrolling in the GeoTrust web forms, you will be asked whether the certificate is a renewal. Make sure you select Yes - this will provide you with the special renewal pricing and extra months (if applicable).

3. GeoTrust will issue your SSL certificate and return it to you by email. Copy the certificate into a text editor such as notepad and save as yourdomain.cer.

4. Return to the Directory Security tab of your dummy site (not your live site) and click Server Certificate and follow the on screen wizard:
   • Ensure that you select Process the pending request and install the certificate. Click Next.
   • Locate the yourdomain.cer file when prompted to locate your webserver certificate. Click Next.
   • Review the summary screen and ensure that you are processing the correct certificate. Click Next.
   • Click Next and then Finish on the confirmation screen.

Your new certificate is now installed in the dummy site. You must now replace your old certificate in the live site with the new certificate in the dummy site:

5. In the Properties of your live web site, select Directory Security, then click the Server Certificate button. Select Replace the current certificate and click Next.

   • You will be asked to select your certificate from a list of installed certificates.
     Ensure you select the new certificate from the list.
   • Review the summary screen and ensure that you are processing the correct certificate. Click Next.
   • Click Next and then Finish on the confirmation screen.

Your old certificate has now been replaced with the new certificate.