Remediation Steps

Follow the steps below to remediate this finding on Microsoft IIS webserver.

1. Obtain a certificate from a publicly trusted Certificate Authority (CA) such as Let's Encrypt, DigiCert, or Sectigo.

2. In IIS Manager, select your site and click Bindings.

3. Edit the HTTPS binding and select the new trusted certificate from the SSL certificate drop-down.

4. Ensure the full certificate chain (intermediate certificates) is installed in the Local Machine > Intermediate Certification Authorities store.