iis certificate link to new ca server
Next, create a link in an appropriate place on your Web site so that users can install your CA's self-signed certificate as a trusted CA. Finally, configure IIS to use your Web server's new certificate (not the CA's self-signed certificate). Now, when users browse to https://yourserver.com, they'll see a warning that your Web server is presenting a certificate signed by an untrusted CA. Instruct the users to let the Web page load proceed.