.

1. Download/Install Microsoft SDKs 2. Put in PATH the Bin directory (contains tools makecert.exe and pvk2pfx) 3. Create  root authority  makecert -r -pe -n "CN=My Root Authority" -ss CA -sr CurrentUser -a sha1 -sky signature -cy authority -sv CA.pvk CA.cer 4.  Install the CA.cer in Local Computer\ Trusted Root Certification Authorities. (Use certmgr.msc) 5. Create  certificate using output of 2. 6.  Import server.pfx into IIS. References: http://social.msdn.microsoft.com/Forums/vstudio/en-US/bb0fc194-5bf3-4c24-94bb-c86f94c76bc2/could-not-establish-trust-relationship-for-the-ssltls-secure-channel-with-authority-pc1 http://msdn.microsoft.com/en-us/library/hh556232.aspx