Installation plugins are responsible for making the necessary changes to your application(s) after successfully creating or renewing a certificate. Currently there are three of these plugins.

IIS Web

Create or update website bindings in IIS

• Existing https bindings in any site linked to the previous certificate are updated to use the new certificate.
• Hosts names which are determined to not yet have been covered by any existing binding, will be processed further.
  • All existing https bindings in target site whose hostnames match with the new certificate are updated to use the new certificate. This happens even if they are using certificates issued by other authorities. (Note that if you want to prevent this from happening, you can use the --excludebindings switch).
  • If no existing https binding can be found, a new binding is created in the target website. It will use port 443 unless a different one is specified with the --sslport switch.
  • New bindings will be created or updated for matching host headers with the most specific match. E.g. if you generate a certificate for a.b.c.com, the order of preference for the binding creation/change will be:
    • a.b.c.com
    • *.b.c.com
    • *.c.com
    • *.com
    • Default (emtpy) binding
  • If the certificate contains a wildcard domain, the order of preference will be:
    • *.a.b.c.com
    • x.a.b.c.com
  • The first preferred option be created from scratch if none of the later options are available.
• Unattended --installation iis [--installationsiteid x] [-sslport x]

IIS FTP

Create or update FTP site certificate in IIS

• Any existing FTP sites linked to the previous certificate are updated to use the new certificate.
• The target FTP site will be updated to use the new certificate.
• Unattended --installation iisftp [--installationsiteid x]

Script

Run external script, as described here.

• Unattended --installation script --script C:\script.bat [--scriptparameters x]

Multiple

More than one plugin can run by choosing them in order of execution.

• Unattended --installation iis,iisftp,manual or --installation manual,iis

None

Do not run any installation steps

• Unattended --installation none