In this TripleZero iT manual we will discuss SSL certificate requests on a Windows server. You can manage Windows VPS's via RDP and IIS. Hostnames, certificates and application pools must match, otherwise the site will remain on the wrong IP or without HTTPS.
We write based on the working method in our customer panel and the control panels that belong to your package (DirectAdmin, CyberPanel or Plesk). Follow the steps in order and test after each change.
Preparation
- Login for the TripleZero iT customer panel.
- Access to DirectAdmin, CyberPanel, Plesk, or the VPS console — depending on your product.
- A current backup or snapshot if you change something structurally.
- The exact hostname or IP you will be testing on.
Steps
- Make an RDP connection to the IP from the customer panel.
- Open IIS Manager and check Sites, Bindings and Application Pools.
- Mip DNS A/AAAA of the domain to this IP before requesting a certificate.
- Apply the setting from this article and recycle the application pool.
- Test in a private window and via a SSL check.
Check certificate chain
A valid certificate covers the hostnames that visitors type (apex and www, plus any subdomains). Only force HTTPS and HSTS if the chain is correct in the browser and via a SSL check.
Let's Encrypt automatically renews in DirectAdmin, CyberPanel and Plesk as long as port 80 is reachable. You use a CSR for paid OV/EV certificates.
Check whether it was successful
- Does the service work from another network or 4G (no old DNS cache)?
- Do you not see any new 4xx/5xx or auth errors in logs?
- Is the time correct: DNS-TTL, Microsoft-verification or SSL-issuance may take minutes.
If things still go wrong
Reset the previous value if the change is clearly the culprit. Write down error texts literally (no paraphrase). Send in a ticket to TripleZero iT: product, domain/IP, timestamp and screenshot.
Can't figure it out after these steps? Open a ticket at TripleZero iT via the customer panel. Mention your domain name or VPS hostname, the time and what you have already tried.
Related: RDP, IIS, SQL Server and SSL on Windows.