TechnoBlogy » IIS http://technoblogy.net Technology with a Big difference Mon, 05 Dec 2011 17:29:42 +0000 en hourly 1 http://wordpress.org/?v=3.2.1 Configuring SSL for a website on IIS http://technoblogy.net/configuring-ssl-for-a-website-on-iis/ http://technoblogy.net/configuring-ssl-for-a-website-on-iis/#comments Thu, 05 Nov 2009 07:37:07 +0000 Nauman http://technoblogy.net/configuring-ssl-for-a-website-on-iis/ To remove the issue of sending/receiving data on http, SSL (Secure Sockets Layer) is used to encrypt data for transmission.

In order to implement SSL successfully on your IIS, you need to get a Server Certificate. Server Certificates can be obtained from a trusted 3rd party CA such as VeriSign or Thawte.

Steps for Configuring SSL

To configure SSL on your IIS web server please follow the following steps:

  • Open IIS Manager.
  • In IIS Manager, expand your SERVERNAME, and then websites node.
  • Right click on "Default Website"

IISMan 

 

 

 

 

 

 

 

 

 

On properties dialog box select the "Directory Security" tab.

DSecurity

 

 

 

 

 

 

 

 

 

  • In Directory Security tab, click Server Certificate.
  • Click Next on Welcome screen.
  • On Server Certificate, select "Create new Server certificate" and then click next.

     

    certificate

     

     

     

     

     

     

     

     

     

    You can also import existing certificates that are previously installed on your web server.

    On the Delayed or Immediate Request page, click Send the request immediately to an online certification authority, and then click Next.newCert

     

     

     

     

     

     

     

     

    On the Name and Security Settings page, in the Name box, type yourservername.domainname.com

    certWizard

     

     

     

     

     

     

     

     

    On the SSL Port page, in the SSL port this web site should use box, verify that 443 is specified, and then click Next.

    On the Choose a Certification Authority page, in the Certification Authorities box, verify that your online CA is selected, and then click Next.

    On the Certificate Request Submission page, click Next to submit the request, and then click Finish to complete the wizard.

    This is how you setup your IIS Server to implement SSL to secure communication of your websites.

    • ]]>     http://technoblogy.net/configuring-ssl-for-a-website-on-iis/feed/ 0     Security Certificate problem http://technoblogy.net/security-certificate-problem/ http://technoblogy.net/security-certificate-problem/#comments Tue, 03 Nov 2009 14:34:16 +0000 Nauman http://technoblogy.net/security-certificate-problem/ If you are using a computer without the connector (console) software on it (e.g. at work trying to access your home server) and you try to connect to the web interface of WHS then the following error appears:

    If you are using a computer without the connector (console) software on it (e.g. at work trying to access your home server) and you try to connect to the web interface of WHS then the following error appears:

    zrclip_001p578a65e4

     

     

     

     

     

     

     

     

    Home PCs with the connector/console software installed have the server’s certificate automatically installed during connector setup. Computers without the software installed don’t have this certificate and so the error message.

    To stop this error appearing; when accessing the web interface we need to export the certificate from a PC with the connector/console software on it and then import it into the PC without the software on it.

    EXPORT
    1. So on the PC with the connector/console software on it open your web browser and type in your https://xxxx.livenode.com address
    2. To the right of the address bar click on the Padlock icon and then View certificates
    3. Click the Certification Path tab
    4. Double click the long GUID number (root certificate)
    5. Click the Details tab
    6. Click the Copy to File… button
    7. Export the certificate somewhere safe using default option
    IMPORT
    1. Move the certificate to the machine without the connector/console software
    2. Double click the the .cer file and select Install Certificate… on the General tab
    3. Click Next on the wizard that opens and place a dot in Place all certificates in the following store
    4. Click Browse and select Trusted Root Certification Authorities and click OK
    5. ClickNext and thenFinish

    That’s it. You can now access your web interface on your PC without the connector/console software via your livenode.com dynamic address, your server name e.g. SERVER or localhost without getting the dreaded error html page.

    Home PCs with the connector/console software installed have the server’s certificate automatically installed during connector setup. Computers without the software installed don’t have this certificate and so the error message.

    To stop this error appearing; when accessing the web interface we need to export the certificate from a PC with the connector/console software on it and then import it into the PC without the software on it.

    EXPORT
    1. So on the PC with the connector/console software on it open your web browser and type in your https://xxxx.livenode.com address
    2. To the right of the address bar click on the Padlock icon and then View certificates
    3. Click the Certification Path tab
    4. Double click the long GUID number (root certificate)
    5. Click the Details tab
    6. Click the Copy to File… button
    7. Export the certificate somewhere safe using default option
    IMPORT
    1. Move the certificate to the machine without the connector/console software
    2. Double click the the .cer file and select Install Certificate… on the General tab
    3. Click Next on the wizard that opens and place a dot in Place all certificates in the following store
    4. Click Browse and select Trusted Root Certification Authorities and click OK
    5. ClickNext and thenFinish

    That’s it. You can now access your web interface on your PC without the connector/console software via your livenode.com dynamic address, your server name e.g. SERVER or localhost without getting the dreaded error html page.

    ]]>     http://technoblogy.net/security-certificate-problem/feed/ 0