Enable SSL:
1.Obtain a Certificate
steps:
1.Control Panel->Administrative Tools->Internet Information Services(IIS) Manager
2.Expand web site then right click site which you want to enable SSL(Here I choose Default Web Site) and click Properties
3.Switch to Directory Security tab
4.Click Server Certificate button under Secure Communications section
5.In Web Server Certificate Wizard Click Next,then click Create a New Certificate and click Next
6.Select Prepare the request now, but send it later and click Next
7.Input Name then Next,Input Organization and Organization Unit then click Next
8.Input Common Name then Next
9.Select Country,Input State/Province,City/Locality then Next
10.Save the file as a .txt file(Such as C;\certreq.txt) then click Next twice
11.Click finish
2.Request the Certificate
Steps:
1.Install Certificate Services(From Add/Remove Windows Components in Add/Remove Programes)
1.1Select Certificate Services in List
1.2Select Stand-alone root CA in CA Type then click Next
1.3Input Common name for this CA,Next
1.4Accept default setting in Certificate Database Setting then click Next
1.5Click Finish
2.Request Certificate
2.1Run Internet Explorer and input http://localhost/CertSrv/default.asp
2.2Click Request a Certifiacte link in Microsoft Certificate Service window
2.3Click Advanced Certificate request
2.4Click Submit a Certificate request by using a base-64-encoded CMC or.... link
2.5Copy Content in your created certreq.txt file and paste into Saved Request Rich text box then click submit
3.Certificate Authority
3.1Control pane->Administrative Tools->Certificate Authority
3.2Expand Peding Requests and select the certification you created
3.3Right click and select All tasks->Issue
3.4Expand Issued Certificates and open certificate which you issued
3.5Switch to Details tab then click Copy to file
3.6In Certificate Export Wizard accept default setting and give file name cce.cer
3.Import Certificate
Steps:
1.Control Panel->Administrative Tools->Internet Information Services(IIS) Manager
2.Expand web site then right click site which you want to enable SSL(Here I choose Default Web Site) and click Properties
3.Switch to Directory Security tab
4.Click Server Certificate button under Secure Communications section
5.Select Process the peding request and install the certificate then click Next
6.Select the file you created(cce.cer) click Next
7.Accept default port 443 and click next
8.Click Finish
4.Confige IIS Server
Steps:
1.In Directory Security tab click Edit button under Secure Communications section
2.Check on Require secure channel(SSL) and Require 128-bit encryption checkbox then click OK
3.Click Edit button under Authentication and access control section in Directory Security tab
4.Check off Enable anonymous access checkbox and Integrated Windows authentication checkbox then check on Basic authentication(Password is sent in clear txt) checkbox then click OK.
|
本类阅读TOP10