- Mission: Configure Centralized Certificate Store in IIS to better manage certificates
- Symptoms
- Manage certificates when they expire is a nightmare
- OR
- Every time a wildcard or SAN certificate expires you need to go site by site reconfiguring their bindings
- Manage certificates when they expire is a nightmare
- Prerequisites
- Have IIS already installed with your own environment custom settings
- A network share where certificates will be stored
- Info
- This procedure will follow the GUI (Graphic User Interface) method.
Step 1: Add Centralized Certificate Support feature to IIS server









This process does not require a reboot.
Step 2: Configure Centralized Certificates in IIS


- Click Edit Feature Settings.
- Select the checkbox Enable Centralized Certificates.
- Enter the physical path where the certificates are stored. This can be a local folder on the server or a network share.
- Enter the username and password of an account with read/write privileges to the folder where the certificates are stored. I recommend to have a service account with access only to this folder.
- Enter the password for the pfx certificate file, if needed.
- Click OK to finish the configuration.
Step 3: Bind your sites to the certificate store
For every site you need to bind the certificate to the centralized store


