Using a full IIS Certificate

Self-signed certificates are great for testing under SSL to make sure your application works, but it's not practical for production apps as the certificate would have to be installed on every machine you'd expect to trust this certificate.

Once you go to production, especially public production you will need an 'official' certificate signed by one of the global certificate authorities.

The easiest way to do this is to purchase a full IIS certificate and install it in IIS. The IIS certificate can be used for self-hosted applications using the HttpListener so therefore it will work with a self-hosted SignalR or any HttpListener application.

Once the time comes to go live, simply register a new certificate through IIS, then use:

netsh http add sslcert

to register that certificate as shown above. A public SSL certificate, in most cases, is already recognized so no further certificate store moving is required. It should only require the netsh registration to tie it to a particular port and app Id.

Last updated