Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to perform web service calls from within my own web server running on IIS. IIS needs to make calls out to another non-Microsoft (Linux) server over HTTPS that uses an internal Certificate Authority (CA) for SSL.

How do I get IIS to trust the proper root certificate from this CA?

Also, how do I test that this trust is working? I assume a browser request from the server hosting IIS is insufficient.

share|improve this question
up vote 3 down vote accepted

Install the certificate from the CA on the server running IIS, and make sure it ends up in the "Trusted Root Certification Authorities" store for the machine. You may have to open a certificates console in MMC.

share|improve this answer
+1. This is not something you do in IIS - trust is a per machine thing. – TomTom Nov 11 '10 at 14:37
Thanks for the answer! Any ideas on how I can verify this setup? We travel to our clients and install software which relies on this, but want some verification before we go out there. – Kirk Liemohn Nov 11 '10 at 14:44
If you open the certificate on the server, you can see if it is valid, and you can verify trust up the chain. – CarloBaldini Nov 11 '10 at 15:27
OK, I'll assume that "open the certificate on the server" simply means to use the Certificate MMC snap-in. Thanks! – Kirk Liemohn Nov 11 '10 at 17:21
Just make sure to choose Computer Account when opening the certificates snap-in and the import the certificate into the "Trusted Root Certification Authorities" folder. – Robert Nov 12 '10 at 14:11

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.