RE: SSL for a clustered web site

From: Karl Westerholm [MS] (karlwestonline@microsoft.com)
Date: 07/20/02


From: karlwestonline@microsoft.com (Karl Westerholm [MS])
Date: Sat, 20 Jul 2002 00:39:02 GMT


Greetings,

   I am assuming you are using IIS5? If so, then I think I have several KB
articles you will find useful. The first is the direct answer to your
question, how to generate a certificate request file from a given website
for submission either to Verisign, Entrust, or perhaps to your own internal
Certificate Server:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q228821

   This next KB is a little more elaborate. It presumes that you have a
W2K/Certificate Server 2.0 server set up for testing purposes, but if you
replace the sections referring to Cert Srv 2 with whatever method
Verisign/Entrust requests it is nevertheless a good resource for setting up
SSL generally:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q290625

   As far as the number of certificates you may need, that will depend on
your Certificate issuer. If you issue your own certificates (which still
results in perfectly secure SSL connections) you can simply export them
from one server in the cluster to another as needed.

   On the other hand, if you are using a cert from (say) Verisign - and
this certificate is going to be installed to multiple servers in a farm or
cluster - you should check with them on licensing requirements. In some
cases, you may need to license a copy for each server.

     Hope this helps,
     
        -->Karl

 

“Please do not send email directly to this alias. This is our online
account name for newsgroup participation only.”

This posting is provided “AS IS” with no warranties, and confers no rights.
You assume all risk for your use. © 2001 Microsoft Corporation. All rights
reserved.

--------------------
| From: cszamir@sandia.gov (Chris)
| Newsgroups: microsoft.public.inetserver.iis.security
| Subject: SSL for a clustered web site
| Date: 18 Jul 2002 13:35:21 -0700
| Organization: http://groups.google.com/
|
| I've got a web-based application running on a two-node clustered
| setup. I need to know how I can get this web site, which runs on the
| virtual clustered machine, to be secure. In other words, what do I
| need to provide to Verisign, Entrust or any other certificate
| authority in order for this to work? Any suggestions or help would be
| greatly appreciated. Thanks
|



Relevant Pages

  • RE: SSL MITM not on port 443
    ... Have you ever done what you're trying to do on a "normal" SSL web ... My recommendation would be to set up a web server in your lab ... hopes that the client will accept that certificate. ... SSL MITM not on port 443 ...
    (Pen-Test)
  • Re: OWA 2003 w/ Smart Card Authentication.
    ... Exchange 2003 server via ActivSync. ... the IIS certificate. ... Whether or not authentication will succeed is completely dictated by ... Server's SSL certificate must be configured on root of v-server via ...
    (microsoft.public.exchange.connectivity)
  • Re: OWA 2003 w/ Smart Card Authentication.
    ... Exchange 2003 server via ActivSync. ... the IIS certificate. ... Whether or not authentication will succeed is completely dictated by ... Server's SSL certificate must be configured on root of v-server via ...
    (microsoft.public.exchange.connectivity)
  • Re: "Could not connect to server" error when accessing Outlook 200
    ... Perhaps when you connect via RDP, you have to use SSL. ... The server you are connected to is using a security certificate ... A certificate chain processed, but terminated in a root certificate which is ... Settings on the Advanced tab. ...
    (microsoft.public.outlook.installation)
  • Re: Publish SSL Web Server behind SBS2003
    ... > How to configure a certificate for use with a Web publishing rule in ISA ... > Server 2004 ... > RWW/OWA for SSL encryption. ... Right click the SSL Web Site and click Properties. ...
    (microsoft.public.windows.server.sbs)