﻿{"id":326,"date":"2026-08-31T03:27:27","date_gmt":"2026-08-31T03:27:27","guid":{"rendered":"https:\/\/sangnguyen.drayddns.com\/?p=326"},"modified":"2026-08-31T06:25:13","modified_gmt":"2026-08-31T06:25:13","slug":"huong-dan-cai-ssl-mien-phi","status":"publish","type":"post","link":"https:\/\/sangnguyen.drayddns.com\/index.php\/2026\/08\/31\/huong-dan-cai-ssl-mien-phi\/","title":{"rendered":"H\u01b0\u1edbng d\u1eabn c\u00e0i \u0111\u1eb7t SSL hosting mi\u1ec5n ph\u00ed (N\u1ec1n t\u1ea3ng WordPress tr\u00ean IIS Windows Server)"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">B\u01b0\u1edbc 1: Chu\u1ea9n b\u1ecb c\u1ed5ng m\u1ea1ng v\u00e0 c\u1ea5u h\u00ecnh IIS Binding<\/h2>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Tr\u01b0\u1edbc khi xin ch\u1ee9ng ch\u1ec9 SSL, Let&#8217;s Encrypt c\u1ea7n truy c\u1eadp \u0111\u01b0\u1ee3c website c\u1ee7a b\u1ea1n t\u1eeb b\u00ean ngo\u00e0i qua c\u1ed5ng 80 (HTTP) \u0111\u1ec3 x\u00e1c th\u1ef1c.<\/summary>\n<h3 class=\"wp-block-heading\">1. M\u1edf Port tr\u00ean Router DrayTek:<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Truy c\u1eadp router<code> \u2192<\/code> v\u00e0o m\u1ee5c Port Redirection (ho\u1eb7c NAT).<\/li>\n\n\n\n<li>T\u1ea1o 2 quy t\u1eafc chuy\u1ec3n ti\u1ebfp c\u1ed5ng v\u1ec1 \u0111\u1ecba ch\u1ec9 IP c\u1ee5c b\u1ed9 c\u1ee7a m\u00e1y ch\u1ee7 Windows Server:<\/li>\n\n\n\n<li>Port 80 (HTTP) \u2192 IP Server port 80<\/li>\n\n\n\n<li>Port 443 (HTTPS) \u2192 IP Server port 443<\/li>\n<\/ul>\n<\/details>\n\n\n\n<h3 class=\"wp-block-heading\">1. M\u1edf Port tr\u00ean Router DrayTek:<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Truy c\u1eadp router \u2192 v\u00e0o m\u1ee5c Port Redirection (ho\u1eb7c NAT).<\/li>\n\n\n\n<li>T\u1ea1o 2 quy t\u1eafc chuy\u1ec3n ti\u1ebfp c\u1ed5ng v\u1ec1 \u0111\u1ecba ch\u1ec9 IP c\u1ee5c b\u1ed9 c\u1ee7a m\u00e1y ch\u1ee7 Windows Server.<\/li>\n\n\n\n<li>Port 80 (HTTP) \u2192 IP Server port 80.<\/li>\n\n\n\n<li>Port 443 (HTTPS) \u2192 IP Server port 443.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"869\" height=\"432\" src=\"https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_1-e1788152954801.jpg\" alt=\"\" class=\"wp-image-351\" style=\"aspect-ratio:2.011599625818522;width:561px;height:auto\" srcset=\"https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_1-e1788152954801.jpg 869w, https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_1-e1788152954801-300x149.jpg 300w, https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_1-e1788152954801-768x382.jpg 768w\" sizes=\"auto, (max-width: 869px) 100vw, 869px\" \/><\/figure>\n<\/div>\n\n\n<h3 class=\"wp-block-heading\">2. M\u1edf Port tr\u00ean Windows Firewall:<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>M\u1edf Windows Defender Firewall with Advanced Security.<\/li>\n\n\n\n<li>T\u1ea1i m\u1ee5c Inbound Rules, \u0111\u1ea3m b\u1ea3o \u0111\u00e3 c\u00f3 rule cho ph\u00e9p lu\u1ed3ng TCP c\u1ed5ng 80 v\u00e0 443.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"204\" src=\"https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_2-1024x204.jpg\" alt=\"\" class=\"wp-image-352\" srcset=\"https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_2-1024x204.jpg 1024w, https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_2-300x60.jpg 300w, https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_2-768x153.jpg 768w, https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_2-1536x306.jpg 1536w, https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_2.jpg 1551w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">3. Th\u00eam Hostname (Binding) tr\u00ean IIS:<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>M\u1edf IIS Manager \u2192 ch\u1ecdn website WordPress c\u1ee7a b\u1ea1n \u1edf c\u1ed9t b\u00ean tr\u00e1i.<\/li>\n\n\n\n<li>\u1ede menu b\u00ean ph\u1ea3i (Actions), nh\u1ea5n v\u00e0o Bindings&#8230;.<\/li>\n\n\n\n<li>Ki\u1ec3m tra d\u00f2ng http port 80: n\u1ebfu Host name \u0111ang tr\u1ed1ng, nh\u1ea5n Edit \u2192 nh\u1eadp t\u00ean mi\u1ec1n DrayDDNS c\u1ee7a b\u1ea1n (v\u00ed d\u1ee5: yourname.drayddns.com) v\u00e0o \u00f4 Host name \u2192 b\u1ea5m OK.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"422\" src=\"https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_3-1024x422.jpg\" alt=\"\" class=\"wp-image-353\" srcset=\"https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_3-1024x422.jpg 1024w, https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_3-300x124.jpg 300w, https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_3-768x316.jpg 768w, https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_3-1536x632.jpg 1536w, https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_3.jpg 1921w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">B\u01b0\u1edbc 2: D\u00f9ng win-acme \u0111\u1ec3 xin v\u00e0 t\u1ef1 \u0111\u1ed9ng c\u00e0i SSL<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>win-acme<\/strong> l\u00e0 c\u00f4ng c\u1ee5 t\u1ef1 \u0111\u1ed9ng xin ch\u1ee9ng ch\u1ec9 Let&#8217;s Encrypt, c\u00e0i v\u00e0o IIS v\u00e0 t\u1ef1 gia h\u1ea1n tr\u01b0\u1edbc khi h\u1ebft h\u1ea1n 90 ng\u00e0y.<\/p>\n\n\n<div>1. T\u1ea3i c\u00f4ng c\u1ee5: Truy c\u1eadp trang ch\u1ee7 win-acme.com v\u00e0 t\u1ea3i file .zip (b\u1ea3n x64 pluggable ho\u1eb7c x64 trim).<\/div>\n<div>2. T\u1ea1o m\u1ed9t th\u01b0 m\u1ee5c c\u1ed1 \u0111\u1ecbnh tr\u00ean \u1ed5 \u0111\u0129a m\u00e1y ch\u1ee7 (v\u00ed d\u1ee5: C:\\tools\\win-acme) v\u00e0 gi\u1ea3i n\u00e9n to\u00e0n b\u1ed9 file v\u00e0o \u0111\u00e2y.<\/div>\n<div>3. Nh\u1ea5p chu\u1ed9t ph\u1ea3i v\u00e0o file wacs.exe \u2192 ch\u1ecdn Run as administrator.<\/div>\n<div>4. Khi giao di\u1ec7n d\u00f2ng l\u1ec7nh hi\u1ec7n ra, th\u1ef1c hi\u1ec7n tu\u1ea7n t\u1ef1:<\/div>\n\n\n<ul class=\"wp-block-list\">\n<li>Nh\u1eadp N (Create certificate with default settings) r\u1ed3i nh\u1ea5n Enter.<\/li>\n\n\n\n<li>Danh s\u00e1ch c\u00e1c web tr\u00ean IIS s\u1ebd hi\u1ec7n ra \u2192 Nh\u1eadp s\u1ed1 th\u1ee9 t\u1ef1 t\u01b0\u01a1ng \u1ee9ng v\u1edbi website WordPress c\u1ee7a b\u1ea1n \u2192 Enter<\/li>\n\n\n\n<li>Ch\u1ecdn binding: Nh\u1eadp A (Cover all bindings) ho\u1eb7c ch\u1ecdn s\u1ed1 th\u1ee9 t\u1ef1 ch\u1ee9a domain yourname.drayddns.com \u2192 Enter.<\/li>\n\n\n\n<li>\u0110\u1ed3ng \u00fd c\u00e1c \u0111i\u1ec1u kho\u1ea3n (nh\u1eadp y n\u1ebfu \u0111\u01b0\u1ee3c h\u1ecfi).<\/li>\n\n\n\n<li>Nh\u1eadp Email c\u1ee7a b\u1ea1n (d\u00f9ng \u0111\u1ec3 nh\u1eadn c\u1ea3nh b\u00e1o n\u1ebfu sau n\u00e0y t\u1ef1 gia h\u1ea1n g\u1eb7p s\u1ef1 c\u1ed1).<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">B\u01b0\u1edbc 3: \u0110\u1ed5i \u0111\u1ecba ch\u1ec9 WordPress sang HTTPS<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi c\u00f3 SSL, c\u1ea7n c\u1eadp nh\u1eadt \u0111\u01b0\u1eddng d\u1eabn h\u1ec7 th\u1ed1ng c\u1ee7a WordPress \u0111\u1ec3 tr\u00e1nh l\u1ed7i giao di\u1ec7n ho\u1eb7c v\u1ee1 h\u00ecnh \u1ea3nh:<\/p>\n\n\n<div>1. \u0110\u0103ng nh\u1eadp trang qu\u1ea3n tr\u1ecb WordPress ([http:\/\/yourname.drayddns.com\/wp-admin](http:\/\/yourname.drayddns.com\/wp-admin)).<\/div>\n<div>2. V\u00e0o C\u00e0i \u0111\u1eb7t (Settings) \u2192 T\u1ed5ng quan (General).<\/div>\n<div>3. Thay \u0111\u1ed5i 2 d\u00f2ng sau:<\/div>\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:58%\">\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"120\" src=\"https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_4-1024x120.jpg\" alt=\"\" class=\"wp-image-354\" style=\"aspect-ratio:8.535287421741605\" srcset=\"https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_4-1024x120.jpg 1024w, https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_4-300x35.jpg 300w, https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_4-768x90.jpg 768w, https:\/\/sangnguyen.drayddns.com\/wp-content\/uploads\/2026\/08\/SSL_4.jpg 1357w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:42%\">\n<ul class=\"wp-block-list\">\n<li>\u0110\u1ecba ch\u1ec9 WordPress (URL): \u0110\u1ed5i t\u1eeb http:\/\/&#8230; th\u00e0nh <a href=\"https:\/\/yourname.drayddns.com\">https:\/\/yourname.drayddns.com<\/a><\/li>\n\n\n\n<li>o \u0110\u1ecba ch\u1ec9 trang web (URL): \u0110\u1ed5i t\u1eeb http:\/\/&#8230; th\u00e0nh <a href=\"https:\/\/yourname.drayddns.com\">https:\/\/yourname.drayddns.com<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">4. Cu\u1ed9n xu\u1ed1ng nh\u1ea5n L\u01b0u thay \u0111\u1ed5i (Save Changes) (h\u1ec7 th\u1ed1ng s\u1ebd y\u00eau c\u1ea7u \u0111\u0103ng nh\u1eadp l\u1ea1i qua giao th\u1ee9c HTTPS).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">B\u01b0\u1edbc 4: T\u1ef1 \u0111\u1ed9ng chuy\u1ec3n h\u01b0\u1edbng (Redirect) to\u00e0n b\u1ed9 HTTP sang HTTPS<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 b\u1ea5t k\u1ef3 ai khi g\u00f5 http:\/\/ \u0111\u1ec1u t\u1ef1 \u0111\u1ed9ng nh\u1ea3y sang https:\/\/, c\u1ea5u h\u00ecnh quy t\u1eafc chuy\u1ec3n h\u01b0\u1edbng tr\u00ean IIS:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. C\u00e0i \u0111\u1eb7t module URL Rewrite (n\u1ebfu ch\u01b0a c\u00f3):<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>T\u1ea3i v\u00e0 c\u00e0i \u0111\u1eb7t extension ch\u00ednh th\u1ee9c t\u1eeb Microsoft: IIS URL Rewrite 2.1.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">2. C\u1eadp nh\u1eadt file web.config:<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li>M\u1edf file web.config n\u1eb1m \u1edf th\u01b0 m\u1ee5c g\u1ed1c ch\u1ee9a m\u00e3 ngu\u1ed3n WordPress, c\u1ee7a m\u00ecnh l\u00e0 \u1edf ch\u1ed5 n\u00e0y C:\\inetpub\\wwwroot<\/li>\n\n\n\n<li>Th\u00eam x\u00f3a to\u00e0n b\u1ed9 v\u00e0 th\u00eam n\u1ed9i dung sau:<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-cyan-blue-color\">&lt;?xml version=\"1.0\" encoding=\"UTF-8\"?>\n&lt;configuration>\n  &lt;system.webServer>\n    &lt;rewrite>\n      &lt;rules>\n        &lt;rule name=\"HTTP to HTTPS Redirect\" stopProcessing=\"true\">\n          &lt;match url=\"(.*)\" \/>\n          &lt;conditions>\n            &lt;add input=\"{HTTPS}\" pattern=\"off\" ignoreCase=\"true\" \/>\n          &lt;\/conditions>\n          &lt;action type=\"Redirect\" url=\"https:\/\/{HTTP_HOST}\/{R:1}\" redirectType=\"Permanent\" \/>\n        &lt;\/rule>\n        &lt;rule name=\"WordPress\" patternSyntax=\"Wildcard\">\n          &lt;match url=\"*\"\/>\n          &lt;conditions>\n            &lt;add input=\"{REQUEST_FILENAME}\" matchType=\"IsFile\" negate=\"true\"\/>\n            &lt;add input=\"{REQUEST_FILENAME}\" matchType=\"IsDirectory\" negate=\"true\"\/>\n          &lt;\/conditions>\n          &lt;action type=\"Rewrite\" url=\"index.php\"\/>\n        &lt;\/rule>\n      &lt;\/rules>\n    &lt;\/rewrite>\n  &lt;\/system.webServer>\n&lt;\/configuration>\n<\/mark><\/strong><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li> Sau khi ho\u00e0n t\u1ea5t 4 b\u01b0\u1edbc tr\u00ean, b\u1ea1n c\u00f3 th\u1ec3 m\u1edf tr\u00ecnh duy\u1ec7t (ch\u1ebf \u0111\u1ed9 \u1ea9n danh) v\u00e0 truy c\u1eadp <a href=\"https:\/\/yourname.drayddns.com\">https:\/\/yourname.drayddns.com<\/a> \u0111\u1ec3 ki\u1ec3m tra bi\u1ec3u t\u01b0\u1ee3ng \u1ed5 kh\u00f3a b\u1ea3o m\u1eadt.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">&#8211; Ch\u00fac c\u00e1c b\u1ea1n th\u1ef1c hi\u1ec7n th\u00e0nh c\u00f4ng !.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>B\u01b0\u1edbc 1: Chu\u1ea9n b\u1ecb c\u1ed5ng m\u1ea1ng v\u00e0 c\u1ea5u h\u00ecnh IIS Binding 1. M\u1edf Port tr\u00ean Router DrayTek: 2. M\u1edf Port tr\u00ean Windows Firewall: 3. Th\u00eam Hostname (Binding) tr\u00ean IIS: B\u01b0\u1edbc 2: D\u00f9ng win-acme \u0111\u1ec3 xin v\u00e0 t\u1ef1 \u0111\u1ed9ng c\u00e0i SSL win-acme l\u00e0 c\u00f4ng c\u1ee5 t\u1ef1 \u0111\u1ed9ng xin ch\u1ee9ng ch\u1ec9 Let&#8217;s Encrypt, c\u00e0i v\u00e0o IIS v\u00e0 [&#8230;]\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-326","post","type-post","status-publish","format-standard","hentry","category-chia-se-hoac-kien-thuc-cntt"],"_links":{"self":[{"href":"https:\/\/sangnguyen.drayddns.com\/index.php\/wp-json\/wp\/v2\/posts\/326","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sangnguyen.drayddns.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sangnguyen.drayddns.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sangnguyen.drayddns.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sangnguyen.drayddns.com\/index.php\/wp-json\/wp\/v2\/comments?post=326"}],"version-history":[{"count":16,"href":"https:\/\/sangnguyen.drayddns.com\/index.php\/wp-json\/wp\/v2\/posts\/326\/revisions"}],"predecessor-version":[{"id":365,"href":"https:\/\/sangnguyen.drayddns.com\/index.php\/wp-json\/wp\/v2\/posts\/326\/revisions\/365"}],"wp:attachment":[{"href":"https:\/\/sangnguyen.drayddns.com\/index.php\/wp-json\/wp\/v2\/media?parent=326"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sangnguyen.drayddns.com\/index.php\/wp-json\/wp\/v2\/categories?post=326"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sangnguyen.drayddns.com\/index.php\/wp-json\/wp\/v2\/tags?post=326"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}