Using SSL protection with Custom Web Publishing 49
3.
Open Administrative Tools and then the Internet Services Manager. Right click and select
Properties
for the web site for which you want to enable the certificate.
4.
Select the
Directory Security
tab in the Web Site Properties window. In the
Secure communications
section, click
Server Certificate
.
5.
In the IIS Certificate Wizard dialog box, click
Next
.
6.
Select
Process the pending request and install the certificate,
then click
Next
.
7.
Select the location of the .CER file, then click
Next
.
8.
The IIS Certification Wizard displays the summary of the Certificate. Verify that the information
is correct, then click
Next
.
9.
Click
Finish
to complete the installation of your certificate.
Part 3: Enabling and configuring SSL and other certificate features
1.
In the
Secure Communications
section of the
Directory Security
tab for the web site, the
Edit
button
should now be enabled. Click
Edit
.
2.
Select
Require secure channel (SSL)
.
3.
Select
Require 128 bit encryption
, if applicable.
4.
Click
Apply
, and then click
OK
to enable SSL and close the property window.
Note
You can also specify how your site will handle client certificates, enable client certificate
mapping, and enable the certificate trust list in this property window.
Part 4: Testing your new SSL enabled web site
1.
Attempt to access your site by typing
http://localhost/Postinfo.html
in the address
bar of your web browser.
You should receive an error message:
The page must be viewed over a secure channel
The page you are trying to view requires the use of https in the address.
HTTP 403.4 Forbidden: SSL required
Internet Information Services
Note
The Postinfo.html page is a standard HTML page found in the root folder of the default web
site.
2.
Attempt to access the same web page by typing
https://localhost/Postinfo.html
in
the address bar of your web browser.
If you can view the Postinfo.html page you have successfully installed the certificate.
Note
You may see a security alert stating that the certificate is not from a trusted root CA. Ignore
this alert, and click
Yes
to continue to the web page.