Installing SSL? 1

[mrdance]

I am planning to install SSL on a private site. I think that the Stand Alone CA suits me. I installed the Certificate services and pointed to a directory. The problem is that I can't activate SSL in my virtual websites. I am beginner, and I have tried to read some manuals about this but I would like to have your help!

Thanks / Henrik

 

[cnd2kdotcom]

If you have CA installed and have created a certificate through your domain in IIS, then all you have to do is go to your virtual directory and go to properties > the Directory Security tab > click Server Certificate > and go through those steps and it will show you which certificates are created on your server. When you are done, 2 things will happen, 1, the button will be blanked out that says Server Certificate, and 2, you must check the box that says require SSL in the Directory Security tab under Secure communications in the edit button.

Then you go to your virtual directory with https:// instead of http:// and it will come up

Since you made this cert yourself, it will come up and tell you that there is an error. It is still secure, it just shows you that 2 issues are good and 1 is not. The issue that does not show as good, is the fact that you made a cert for the domain name and as a virtual dir it will not have the same identity. It's no big deal though... SSL still works..

Hope that helps

 

[mrdance]

Thank you! But will this work if I have host headers, i.e. multiple virtual sites?
// Henrik

 

[cnd2kdotcom]

yes, 1 certificate per Web Site (you call them virtual sites) the virtual sites would be if you had a site underneath the main as a subdomain.

i.e.

http://www.cnd2k.com/accurate

so 1 cert per domain or "host header"

hope that took care of it for ya.

 

[knightforce777]

">If you have CA installed and have created a certificate through your domain in IIS, ....."

Just finished setting up a WIndows 2000 server, and will need SSL soon. No nothing about the step I need to take for the above.

Any direction on finding CA and setting up the certificate through our domain would be greatly appreciated. (Also, can the domaion simply be an IP?)

Thanks

 

[globalstrata]

Microsoft says that SSL would not work with Host Headers -(Q187504) -

http://support.microsoft.com/default.aspx?scid=kb;en-us;187504

- However I was able to make it work.

Make sure that in IIS that you set your website to accept SSL by putting port 443 in the properties of your website.

If you go through the below articles they should help you out. Some are How To's and other are for troubleshooting and solving some problem that you may encounter.

Q299525 -

http://support.microsoft.com/default.aspx?scid=kb;en-us;299525

Q290625 -

http://support.microsoft.com/default.aspx?scid=kb;en-us;290625

Q216907 -

http://support.microsoft.com/default.aspx?scid=kb;en-us;216907

Q284984 -

http://support.microsoft.com/default.aspx?scid=kb;en-us;284984

Q231881 -

http://support.microsoft.com/default.aspx?scid=kb;en-us;231881

Q187504 -

http://support.microsoft.com/default.aspx?scid=kb;en-us;187504

Q248497 -

http://support.microsoft.com/default.aspx?scid=kb;en-us;248497

Q326782 -

http://support.microsoft.com/default.aspx?scid=kb;en-us;326782

Q256132 -

http://support.microsoft.com/default.aspx?scid=kb;en-us;256132

In addition, a really good book to use as a basic reference is the: Microsoft Windows 2000 and IIS 5 Administrator Pocket Consulting Book

Gladys Rodriguez
GlobalStrata Solutions

http://www.globalstrata.com