SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can you change the SharePoint 2010 Central Administration site so that it works over SSL, rather than a random port over http? Other sites on the server may also use SSL, so would use a host header to differentiate between them (e.g. for central admin, for documents etc).

Can't set host headers with https in IIS, even though you can add a https binding without defining an IP address... suggesting that wildcard ip's may work (and the same certificate used on different sites).

Is it just a case of configuring the site in IIS as you would any other secure site, or do you also have to run 'stsadm' to tell SharePoint you have done this as well?

share|improve this question
up vote 1 down vote accepted

You should be able to just apply the SSL Cert in IIS for the central admin site in the same way as any other site, I reckon.

share|improve this answer

I don't think you can do host headers with ssl. Each site with it's own cert will need a different IP address.

I could be wrong though if you have a wildcard cert. I've never tried setting that up on IIS before.

share|improve this answer
This is old but just to clarify this, you CAN use host headers with SSL using a wildcard cert. This allows hosters to host multiple host-named site collections within an SSL enabled Web app, or alternatively use a single wildcard cert for multiple Web apps (on one IP). The latter can be a bit of an admin nightmare, especially if you have too many Web apps. – Benjamin J Athawes Oct 13 '11 at 21:13

1) I prefer to extend the CA site 2)install certificate as ordinary site. Certificate should have DNS/Hostheader information. 3) Bind the hostheader in IIS 4)Verify the AAM

It worked perfectly for me.

Make sure that your User Profile Service has these SSL information also

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.