Multiple SSL on the same IIS

16 Jun 2005 5:33 AM

Jose Veroes

Hi,

I configured 2 Virtual servers with different IPs but when I tried to
configured the IPs on the SSL portion of the dialog box (the one that is on
the properties of the web site, clicking Advance - I gess - in the General
tab, where you have - by default - as IP *All Unassigned*) I noticed that is
disable (IIS6.0 Win2003 Ent Ed). Do I need to install the certificates first
in order to enable this? Do I need to enable this on some Key value on the
registry? elsewhere?

Thanks in advance.

16 Jun 2005 9:24 AM

Leon Mayne [MVP]

Jose Veroes wrote:

> Hi,
>
> I configured 2 Virtual servers with different IPs but when I tried to
> configured the IPs on the SSL portion of the dialog box (the one that
> is on the properties of the web site, clicking Advance - I gess - in
> the General tab, where you have - by default - as IP *All
> Unassigned*) I noticed that is disable (IIS6.0 Win2003 Ent Ed). Do I
> need to install the certificates first in order to enable this? Do I
> need to enable this on some Key value on the registry? elsewhere?

Have you added the ip addresses to the machine's IP config? Right-click your
local area connection in 'network connections' and select properties. In the
listbox for protocols click TCP/IP and select properties. You can then add
the new IP addresses so they appear in the drop down in the IIS manager.

16 Jun 2005 9:45 AM

Bernard Cheah [MVP]

Yes, the cert must be installed before you can configure the SSL - IP / Port
binding.

--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/

Show quoteHide quote

"Jose Veroes" <Jose Ver***@discussions.microsoft.com> wrote in message
news:E0BA4406-AC1B-459E-AA3A-288895F3FC03@microsoft.com...
> Hi,
>
> I configured 2 Virtual servers with different IPs but when I tried to
> configured the IPs on the SSL portion of the dialog box (the one that is
> on
> the properties of the web site, clicking Advance - I gess - in the General
> tab, where you have - by default - as IP *All Unassigned*) I noticed that
> is
> disable (IIS6.0 Win2003 Ent Ed). Do I need to install the certificates
> first
> in order to enable this? Do I need to enable this on some Key value on the
> registry? elsewhere?
>
> Thanks in advance.

16 Jun 2005 8:20 PM

David Wang [Msft]

This is by-design.

You must:
1. have a server certificate installed on the machine
2. assign the certificate to the website in IIS

Before you can change any SSL-related configuration on IIS.

The reason is because without a configured SSL certificate on the website,
by IIS lacks a critical piece that it needs to accept any SSL
communications -- so if you were able to change SSL-related settings without
a certificate gives you the false illusion that SSL "works" when it really
doesn't.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

"Jose Veroes" <Jose Ver***@discussions.microsoft.com> wrote in message
news:E0BA4406-AC1B-459E-AA3A-288895F3FC03@microsoft.com...
Hi,

I configured 2 Virtual servers with different IPs but when I tried to
configured the IPs on the SSL portion of the dialog box (the one that is on
the properties of the web site, clicking Advance - I gess - in the General
tab, where you have - by default - as IP *All Unassigned*) I noticed that is
disable (IIS6.0 Win2003 Ent Ed). Do I need to install the certificates first
in order to enable this? Do I need to enable this on some Key value on the
registry? elsewhere?

Thanks in advance.