Implementing a PKI, Part II: Configuring IIS 6.0 - Configuration Details

(Page 2 of 5 )

Moving on, I’m listing a variety of steps you have to follow to configure the IIS Web server and the client’s Web browser to communicate securely using digital certificates. 

Enable Web Service Extensions

In order for Certificate Services Web pages to run correctly, ASP extension must be set to Allowed.

• Go to Start->Administrative tools->IIS Manager->Web Service Extensions.
  
  
• Select Active Server Pages, right-click and then select Allow.

Check Internet Explorer

It is essential to verify that your Internet Explorer is using a 128-bit encryption. To check this:

1. Go to Internet Explorer->Help->About Internet Explorer.
   
   
2. Verify that the Cipher Strength value appears as 128-bit. This is the level of encryption supported by your browser.
   
   
3. If the Cipher Strength is anything less than 128-bit, download the Internet Explorer High Encryption Pack to your computer’s hard disk, and then install it.

Enable Secure Communication

To enable secure communication between your Web server and your clients, you must take the following steps:

• A Server certificate must be installed on the Web server machine.
  
  
• A client certificate must be installed on the client’s machine.
  
  
• The CA’s certificate must be installed in the Trusted Root Certification Authorities store on the Web server and the client’s machine. This allows the Web server and Web client browser to trust the server’s certificate installed on the IIS Web site and the client’s certificate installed on the client’s machine, respectively.

Next: Request a Server Certificate through Web Enrollment Support >>
 

More IIS Articles
More By Eliana Stavrou

Comments On: Implementing a PKI, Part II: Configuring IIS 6.0

>>> Be the FIRST to comment on this article!