# Create an SSL Binding and Certificate

For additional information, see How to Set Up SSL on IIS 7.

1. Obtain a certificate. Open IIS Manager, select the server node in the treeview and double-click the Server Certificates feature in the listview.
2. In the Actions pane, click Create Self-Signed Certificate. Provide a Friendly Name for the new certificate and click OK.
   Note: A self-signed certificate now appears and is marked for Server Authentication use.
3. After creating your certificate, verify NETWORK SERVICES has Read permissions.
4. Create an SSL binding. In the Actions pane, click Bindings to display the bindings editor to create, edit, and delete bindings for your Web site. Click Add... to add your new SSL binding to the site.
5. The default settings for a new binding are set to HTTP on port 80. Select https in the Type drop-down list. Select the self-signed certificate you created in the previous section from the SSL Certificate drop-down list and click OK.
   A new SSL binding now exists for your site.
6. Verify the SSL binding. In the Actions pane, click Browse Web Site and the link associated with the binding you just created.

Internet Explorer (IE) will display an error page because the self-signed certificate was issued by your computer, not by a trusted Certificate Authority (CA). IE will trust the certificate if you add it to the list of Trusted Root Certification Authorities in the certificates store it on the local computer, or in Group Policy for the domain. Firefox and Chrome react differently, but may also prompt you to continue. Click Continue to this website (not recommended).