Tuesday, July 8, 2008

Configuring IIS 6.0 to test web pages using SSL

Configuring IIS 6.0 to test web pages using SSL

Generate certificate from IIS

  1. Click Start, point to Control,click run. then write inetmgr and press Enter to open Internet Information Services (IIS) Manager.
  2. In Internet Services Manager, in the console tree, expand SERVERNAME (your local computer), and then expand Web Sites.
  3. In the console tree, right-click Default Web Site, and then click Properties.
  4. In the Default Web Site Properties dialog box, click Directory Security.
  5. On the Directory Security tab, click Server Certificate.
  6. In the Welcome to the Web Server Certificate Wizard, on the Welcome click next
  7. On the Server Certificate page, verify that Create a new certificate is selected, and then click Next.
  8. Check ‘Prepare the request now, but send it later’ option and click next.
  9. On Name and security page type the name of new certificate and click next.
  10. Fill the organization information and click next.
  11. Fill the site common name and click next.
  12. Fill the geographical information and click next
  13. Browse the Certificate request file and click next. This file will be require to verify and generate a certificate against your certificate by a verifying authority
  14. Click next and finish
  15. a text file containing certificate text will be created at the location you have selected in step 13

Verifying the certificate

After you have verified your certificate with a verifying site(I have done with comodo.com), the requesting authority will generate a certificate file with extension .crt. Now you have to install that certificate generated by the verifying authority over IIS.

Follow step 1 to 6.

1. Check ‘Process the pending request and install the certificate’ and click next.

2. Browse the certificate file with extension .crt generated by verifying authority and click next.

3. Click Finish.

Configuring the site to enable SSL

Now you have to configure your site to use SSL

To configure follow the following steps

  • Expand Default Web site. Right-click your own web site and click Properties.

Note: It's also possible that you might not wish to protect the entire website, but merely one or two pages within the large website. In fact, this scenario is highly probable for most site operators that would only like to protect a couple or important pages, such as an online store or registration form. In that case you do NOT need to SSL-protect the entire site, so do NOT right-click the entire site. Right click only the directory or pages within the site.

  • On the Directory Security tab, click Edit.
  • In the Secure Communications dialog box, click the Require secure channel (SSL) check box, click the Require 128-bit encryption check box, and then click OK.

Now If you run your site using http it will give error.

You can run your site using https. It means your site is using secure socket layer.

No comments: