SSL Question 2

[grx21]

Does anyone know if it required to install Certificate Services (on Windows 2000) prior to Creating and Installing a Site Certificate?

Thanks,

grx21

 

[chiph]

Certificate Services is only needed if you're going to be creating your own certificates. If you're purchasing them from someone like Verisign, you won't need it.

Note that self-generated certificates will usually pop up a "questionable certificate" dialog in a web browser -- at least until the user sets their options to trust your certificate.

Chip H.


____________________________________________________________________
If you want to get the best response to a question, please read FAQ222-2244 first

 

[grx21]

Hi Chip, thanks for answering my question. I am not planning to be creating my own certificates. I will be purchasing one from Verisign and then installing it on the IIS Server. Therefore, I won't need to install Certificate Services right?

Thanks,

grx21

 

[WillShakespeare]

grx,

That's correct. You simply go to your web root (you have to give Verisign your web root name, like

http://www.mysite.com,

so this can be bound to the certificate using a secret key), and then right-click and hit properties. You then go to Directory Security and click Server Certificate...
Follow the wizard!
Once it is on, you will need to configure your site, or alternatively any secure folders within your site, to be forced to use https, otherwise you will be able to access pages both securely and unsecurely by using https or http respectively.

Plus (something we forgot to do), make sure your firewall between web server and web has https port open

443 I think, possibly 444 - Our firewall has an object called HTTPS to make it easy to open that port, but unlesss you look further the port number is not displayed by default - anyway, I'm rambling now!

Good luck,

Will

Will

 

[grx21]

Hi Will,
Thanks for the reply and the tip.

grx21