Microsoft IIS
Manages certificates in HTTPS bindings of IIS sites. Created automatically via IIS Discovery.
How it's created
IIS Stores are automatically provisioned during Discovery when the Create Stores automatically option is enabled. Each HTTPS binding found becomes a Store in the CLM.
Store details
| Card | Description |
|---|---|
| Total | Total certificates in the binding |
| Expiring | Certificates nearing expiration |
IIS Server & Binding Section (Read-only) — displays the data collected during discovery:
| Field | Description |
|---|---|
| IIS Server | Name and IP of the Windows server where IIS is installed |
| Site (IIS) | Name of the IIS site, e.g. Default Web Site |
| Windows Store | Windows certificate store, e.g. My (Personal) |
| Binding IP | IP address of the HTTPS binding |
| Port | Binding port (default: 443) |
| Hostname (SNI) | Hostname for SNI, if configured |
The deploy is performed via a Linux agent + SSH to the Windows IIS server.
Current Certificate — displays common name, validity, and thumbprint of the certificate currently installed on the binding.
Installed Certificates — lists all certificates installed on the store with issuer, issuance date, validity, bind status, and the result of the last deploy. Click View history to see the full log of past deploys.
Install a certificate
On the details screen, click Install Certificate, select the certificate from the inventory, and confirm. The CLM performs the deploy to the IIS binding via the Linux agent + SSH.