--- title: SSL Configuration slug: neurons-for-itsm/on-premises-help/enu/2025/ssl-configuration docTags: createdAt: 2026-07-29T16:36:06.399Z --- This section explains how to configure Secure Sockets Layer (SSL) on Internet Information Services (IIS) for first-time users. The configuration of SSL for a site includes the following steps: - Create an SSL binding on a site. - Verify the SSL binding by making a request to the site. - Configure SSL options in IIS by making SSL a requirement for the site. ## Prerequisites - Install Microsoft IIS in your virtual machine or computer. - Obtain appropriate certificate for SSL encryption and for authenticating the identity of the server. ## Create an SSL binding 1. Open **Internet Information Services (IIS) Manager**, and open **Server Certificates**. 2. Click **Import**, and upload the certificate. :::Paragraph{indent="1"} After the certificate is imported, it appears on the** Server Certificates** page. ::: ::Image[]{src="https://api.archbee.com/api/optimize/parib0MC3hVoUNdfQdnac/wY-f8l3Vc0cCC5CRN4kk0_servercertlisted.png" position="flex-start" size="67" indent="1" width="673" height="428" initialPath="Install_Deploy_Images/server_cert_listed.png" githubPath="ITSM-On-Prem-Help/Content/Install_Deploy_guide/Install_Deploy_Images/server_cert_listed.png" showCaption="false"} 3. In the **Connections** pane, go to **Sites** > **Default Web Site**. 4. In the **Actions** pane, click **Bindings** to create SSL binding. The Site Bindings window opens. ::Image[]{src="https://api.archbee.com/api/optimize/parib0MC3hVoUNdfQdnac/SqAxU_RhzCCARbBUJ-6CA_binding-option.png" position="flex-start" size="20" indent="1" width="195" height="242" initialPath="Install_Deploy_Images/binding-option.png" githubPath="ITSM-On-Prem-Help/Content/Install_Deploy_guide/Install_Deploy_Images/binding-option.png" showCaption="false"} 5. Click **Add**, and enter the required information: ::Image[]{src="https://api.archbee.com/api/optimize/parib0MC3hVoUNdfQdnac/HyIatD9MOGLhDLmesZ0YV_site-binding.png" position="flex-start" size="52" indent="1" width="520" height="410" initialPath="Install_Deploy_Images/site-binding.png" githubPath="ITSM-On-Prem-Help/Content/Install_Deploy_guide/Install_Deploy_Images/site-binding.png" showCaption="false"} | Field | Description | | ------------------- | ---------------------------------------------------------------------------------------- | | **Type** | Select **https** from the dropdown menu. | | **IP address** | Select **All Unassigned** from the dropdown menu. | | **Port** | Enter* 443*. | | **Host name** | Enter the host name of your virtual machine or computer. | | **SSL certificate** | From the dropdown menu, select the certificate that you uploaded in Server Certificates. | 6. Click **OK**. :::Paragraph{indent="1"} IIS creates a new SSL binding for your site. ::: Next, you can verify whether the SSL binding works. ## Verify the SSL binding 1. In the **Connections** pane, go to> **Sites **> **Default Web Site**. 2. In the **Actions** pane, under **Browser Website**, click the site you configured. ::Image[]{src="https://api.archbee.com/api/optimize/parib0MC3hVoUNdfQdnac/E5IAlVxaxyOlt1B-OfwaT_browse-website.png" position="flex-start" size="37" indent="1" width="371" height="406" initialPath="Install_Deploy_Images/browse-website.png" githubPath="ITSM-On-Prem-Help/Content/Install_Deploy_guide/Install_Deploy_Images/browse-website.png" showCaption="false"} The site opens in your default browser. If SSL is configured correctly, the URL begins with *https*, indicating a secured connection. ::Image[]{src="https://api.archbee.com/api/optimize/parib0MC3hVoUNdfQdnac/SAA05w2059j4Z62V33951_site-ssl-configured.png" position="flex-start" size="79" width="785" height="564" initialPath="Install_Deploy_Images/site-ssl-configured.png" githubPath="ITSM-On-Prem-Help/Content/Install_Deploy_guide/Install_Deploy_Images/site-ssl-configured.png" showCaption="false"} ## Configure SSL options in IIS 1. Go to **Connections** pane >** Sites** > **Default Web Site**. 2. On the **Default Web Site Home** page, open **SSL Settings**. 3. Select the **Require SSL** checkbox. 4. Select the **Accept** button for Client certificates. ::Image[]{src="https://api.archbee.com/api/optimize/parib0MC3hVoUNdfQdnac/OcwzDZi41uppzDhU-7n0r_ssl-settings.png" position="flex-start" size="46" indent="1" width="464" height="297" initialPath="Install_Deploy_Images/ssl-settings.png" githubPath="ITSM-On-Prem-Help/Content/Install_Deploy_guide/Install_Deploy_Images/ssl-settings.png" showCaption="false"} 5. Click **Apply**. Once you enable this setting, your host device is secured and you can access the application securely with *https*. ## Manage trusted root certificates for a local computer To prevent security warnings in the browser, you need to add the certificate to the** Trusted Root Certification Authorities** store on your local computer so that the browser recognizes it as a trusted source. To add the certificate to the **Trusted Root Certification Authorities**, follow these steps: 1. Click **Start** and search for **mmc**. 2. On the **File** menu, click **Add/Remove Snap-ins**. 3. Under **Available snap-ins**, select** Certificates** and click **Add**. ::Image[]{src="https://api.archbee.com/api/optimize/parib0MC3hVoUNdfQdnac/6l3HqKkxRwO_qo--cHt7P_addremovesnapins.png" position="flex-start" size="51" indent="1" width="513" height="324" initialPath="Install_Deploy_Images/add_remove_snapins.png" githubPath="ITSM-On-Prem-Help/Content/Install_Deploy_guide/Install_Deploy_Images/add_remove_snapins.png" showCaption="false"} 4. Select **Computer account**, and click **Next**. 5. Click **Finish**, and then click **OK**. 6. In the console tree, go to **Certificates (Local Computer)** > **Trusted Root Certification Authorities**. 7. Right-click **Certificates**, and go to **All Tasks** > **Import**. 8. Click **Next**, and upload the same certificate you used for SSL binding. The local computer now trusts your certificate, and any connections or applications that rely on this certificate will recognize it as secure and valid. If you want to configure both your Neurons for ITSM application database and configuration database to use SSL, refer to [Optional SSL Configuration](docId\:veEanrDKk9vZWs5IM_CEC). :::hint{type="info"} SSL offloading is enabled in IIS Reverse Proxy, so we recommend deploying it only inside trusted network zones. :::