--- title: "Enable SSL on IIS" slug: "bc-enable-ssl-on-iis" description: "Enhance your website's security by enabling SSL with self-signed or CA certificates, essential for Microsoft Dynamics 365 Business Central connections." tags: ["ANY", "Anywhere Mobility Solutions", "BC", "Business Central", "Task"] updated: 2026-06-25T09:59:05Z published: 2026-06-25T09:59:05Z canonical: "docs.staedean.com/bc-enable-ssl-on-iis" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.staedean.com/llms.txt > Use this file to discover all available pages before exploring further. # Enable SSL on IIS Enabling SSL enhances the security of your websites, including the Anywhere Portal. > [!NOTE] > **Note** Running the Anywhere Portal with SSL is required when connecting to a cloud environment of Microsoft Dynamics 365 Business Central. Enabling SSL on a website requires a certificate, either self-signed or from a Certificate Authority (CA). After obtaining a certificate, bind it to the website. A certificate binds to a website, not to an application. ## Self-signed certificates There are several ways to create a certificate: from Azure Key Vault, IIS, third-party tools, or PowerShell. Self-created certificates are known as self-signed and enable SSL on a non-public website. > [!NOTE] > **Note** Some browsers show a security warning the first time they encounter a self-signed certificate. Users should trust and store the certificate at the client level. To create a self-signed certificate: 1. Open Internet Information Services (IIS) Manager. 2. Select the workstation you are installing the certificate on under the **Connections** list. 3. Open the **Server Certificates** tool. ![IIS Certificates Tool](https://cdn.document360.io/da662430-6a41-47b1-8c7e-7e4ac37a9756/Images/Documentation/IIS_ServerCertificateFeature.png) 4. Select the **Create Self-Signed Certificate** link in the upper-right corner, under the **Actions** list. For more information on creating a self-signed certificate, see [References](/business-central/docs/bc-enable-ssl-on-iis#references). ## Requesting certificates from a Certificate Authority Certificates from a Certificate Authority (CA) are globally trusted. A popular, free option supported by many clients that automatically refreshes certificates nearing expiration is [Let's Encrypt](https://letsencrypt.org). For clients that manage Let's Encrypt certificates, see [here](https://letsencrypt.org/docs/client-options/). To request a certificate from a CA, first create a Certificate Signing Request (CSR) on your server. This file contains your server and public key information and is required to generate the private key. To create a CSR in IIS: 1. Open Internet Information Services (IIS) Manager. 2. Select the workstation you are installing the certificate on under the **Connections** list. 3. Open the **Server Certificates** tool. 4. Select the **Create Certificate Request** link in the upper-right corner, under the **Actions** list. 5. Fill in the information in the **Request Certificate** wizard. Enter your two-digit country code, state or province, city or town name, full company name, section name (for example, IT or Marketing), and the common name (typically the domain name). ![IIS Request Certificate Request Page](https://cdn.document360.io/da662430-6a41-47b1-8c7e-7e4ac37a9756/Images/Documentation/IIS_CertificationRequest.png) 6. Leave the **Cryptographic service provider** at the default value. 7. Set **Bit length** to **2048**. 8. Name the certificate request file. The file name does not matter. Send this file to the Certificate Authority so they can create trusted certificates for your server. After you receive the certificate files, complete the certificate signing request. Store the file on the server, you need it to complete the certificate installation. ### Completing the certificate signing request 1. Open Internet Information Services (IIS) Manager. 2. Select the workstation you are installing the certificate on under the **Connections** list. 3. Open the **Server Certificates** tool. 4. Select the **Complete Certificate Request** link in the upper-right corner, under the **Actions** list. 5. Enter the path to the received file or certificate from the CA. 6. Enter a **Friendly Name** as an alias for your certificate so you can find it easily. 7. Set the certificate store to your preference. 8. Select **OK** to finish the installation. The new certificate appears in the list. ### Installing and binding the certificate to your website 1. Open Internet Information Services (IIS) Manager. 2. Select the website on the left side (Default Website). 3. Select **Bindings** on the right side. 4. Select **Add** to create a new binding. ![This image shows how to create a binding in IIS](https://cdn.document360.io/da662430-6a41-47b1-8c7e-7e4ac37a9756/Images/Documentation/IIS_CreateBinding.png) 5. Select **https** as the type to create the entry for HTTPS (default port 443). 6. Enter the hostname to which the certificate is bound. 7. Select the installed certificate from the dropdown menu. > [!NOTE] > If you do not see the appropriate certificate in the list, confirm the certificate is installed. 8. Select **OK** to create the new binding. 9. Navigate to the website via HTTPS to confirm. 10. Navigate from a different client (not the server) to confirm the bindings are correct. ## References | Topic | Link | | --- | --- | | SSL on IIS | [DigiCert](https://www.digicert.com/kb/csr-ssl-installation/iis-8-and-8.5.htm#ssl_certificate_install) | | Create a self-signed certificate | [Microsoft Docs](https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-self-signed-certificate) | | Certificate authorities | [Wikipedia](https://en.wikipedia.org/wiki/Certificate_authority#Providers) | | Let's Encrypt | [Let's Encrypt](https://letsencrypt.org) | ## Related - [Configure IIS](/bc-configure-iis.md)