SSL Certificate for Internal Web Server

%3CLINGO-SUB%20id%3D%22lingo-sub-1199135%22%20slang%3D%22en-US%22%3ESSL%20Certificate%20for%20Internal%20Web%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1199135%22%20slang%3D%22en-US%22%3E%3CP%3EI%20need%20to%20install%20an%20SSL%20Certificate%20on%20our%20web%20server%20running%20Server%202016.%20This%20is%20an%20internal%20web%20server%20that%20hosts%20some%20in-house%20web%20applications.%20It%20does%20not%20host%20any%20external%20websites%2C%20etc.%20So%20far%20I%20have%20Certificate%20Request%20complete%2C%20now%20just%20trying%20to%20get%20the%20certificate.%20Any%20help%20please%2C%20I%20am%20a%20novice%20when%20it%20comes%20to%20internal%20SSLs%20like%20this.%20I%20have%20done%20many%20SSLs%20for%20external%20websites.%20Thank%20you%20in%20advance.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1199135%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESSL%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1199279%22%20slang%3D%22en-US%22%3ERe%3A%20SSL%20Certificate%20for%20Internal%20Web%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1199279%22%20slang%3D%22en-US%22%3EYou%20will%20need%20to%20purchase%20an%20external%20SSL%20certificate%20from%20GoDaddy%2C%20Network%20Solutions%2C%20etc.%2C%20which%20will%20be%20just%20fine%20for%20your%20internal%20web%20apps.%3CBR%20%2F%3EIf%20your%20organization%20has%20an%20internal%20PKI%2C%20then%20you%20can%20submit%20your%20request%20and%20the%20certificate%20will%20be%20issued.%20You%20should%20contact%20your%20IT%20team%20for%20more%20info.%20The%20request%20site%20is%3A%20https%3A%2F%2F%3CFQDN%3E%2Fcertsrv%2F%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20would%20then%20%22complete%22%20the%20certificate%20request%20in%20the%20web%20development%20app%20(IIS%2C%20Tomcat%2C%20etc.)%20where%20the%20request%20was%20created.%3C%2FFQDN%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1199303%22%20slang%3D%22en-US%22%3ERe%3A%20SSL%20Certificate%20for%20Internal%20Web%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1199303%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F446224%22%20target%3D%22_blank%22%3E%40JRE77%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20your%20help%2C%20as%20I%20am%20a%20novice%20to%20getting%20an%20SSL%20for%20an%20internal%20server.%20I%20believe%20we%20have%20an%20Internal%20PKI%2C%20as%20I%20have%20self%20signed%20certificates%20now.%20How%20would%20I%20know%20for%20sure%20if%20I%20have%20an%20Internal%20PKI%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1199310%22%20slang%3D%22en-US%22%3ERe%3A%20SSL%20Certificate%20for%20Internal%20Web%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1199310%22%20slang%3D%22en-US%22%3EYou%20would%20need%20to%20contact%20your%20IT%20department%2C%20they%20would%20know%20for%20sure.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1199321%22%20slang%3D%22en-US%22%3ERe%3A%20SSL%20Certificate%20for%20Internal%20Web%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1199321%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F446224%22%20target%3D%22_blank%22%3E%40JRE77%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20very%20small%20company.%20I%20handle%20IT%20but%20have%20never%20done%20anything%20with%20internal%20SSLs.%20Here%20is%20what%20I%20have%20setup%20in%20IIS%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22ssl3.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F173963iF976AFDF9620DA81%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22ssl3.png%22%20alt%3D%22ssl3.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1201009%22%20slang%3D%22en-US%22%3ERe%3A%20SSL%20Certificate%20for%20Internal%20Web%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1201009%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F446224%22%20target%3D%22_blank%22%3E%40JRE77%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20guess%20plans%20have%20changed%20now.%20The%20new%20task%20is%20making%20my%20local%20web%20server%20public%20facing%20so%20I%20can%20attach%20an%20SSL.%20Is%20there%20any%20easy%20way%20to%20turn%20my%20local%20web%20server%20public%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Regular Contributor

I need to install an SSL Certificate on our web server running Server 2016. This is an internal web server that hosts some in-house web applications. It does not host any external websites, etc. So far I have Certificate Request complete, now just trying to get the certificate. Any help please, I am a novice when it comes to internal SSLs like this. I have done many SSLs for external websites. Thank you in advance.

5 Replies
You will need to purchase an external SSL certificate from GoDaddy, Network Solutions, etc., which will be just fine for your internal web apps.
If your organization has an internal PKI, then you can submit your request and the certificate will be issued. You should contact your IT team for more info. The request site is: https://<FQDN>/certsrv/

You would then "complete" the certificate request in the web development app (IIS, Tomcat, etc.) where the request was created.

@JRE77 

 

Thanks for your help, as I am a novice to getting an SSL for an internal server. I believe we have an Internal PKI, as I have self signed certificates now. How would I know for sure if I have an Internal PKI?

You would need to contact your IT department, they would know for sure.

@JRE77 

 

We are very small company. I handle IT but have never done anything with internal SSLs. Here is what I have setup in IIS

ssl3.png

@JRE77 

 

I guess plans have changed now. The new task is making my local web server public facing so I can attach an SSL. Is there any easy way to turn my local web server public?