Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 414
  • Last Modified:

Where can SSL certificate be installed in IIS 5.1?

I have  a simple question that I need an answer on.  I am working with our Accounting software technical support trying to get our timecard website working correctly, and they are telling me to install my SSL certificate on one of the subfolders under the Default Web Site.  I don't think IIS allows that.  I have tried applying the SSL certificate to the subfolder and the "Server Certificate" button is always greyed out.  I can apply the SSL certificate to the whole Default Web Site and then check the box "Require SSL" for each subfolder.  Is this the correct way to do it or will IIS allow you the apply the SSL certificate at the subfolder level?  I have been arguing back and forth with their technical support, and I need proof of what IIS allows.  They told me that they have tested it hundreds of times, but I can't get it to work.  Please advise.  If anyone has a link or something that I can send them for proof, that would be great.

Thanks
0
bsimmons2376
Asked:
bsimmons2376
  • 4
  • 3
1 Solution
 
bsimmons2376Author Commented:
Little bit more clear now.  So, you can't actually key or request an SSL certificate from the subfolder level, can you?  I'm just trying to make sure that the requesting part of the certificate has to be done at the website level - for example, Default Web Site > Properties > Directory Security tab > Server Certificate button.  This button is greyed out under any subfolder of the website.  The Accounting software technical support said I needed to rekey the certificate for one of the subfolders instead of the whole website, which it won't let me do.
0
 
2PiFLCommented:

I've never done it any other way (always at the website level).  Can the accounting software tech support provide documentation on how apply the cert at a sub folder level?
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
bsimmons2376Author Commented:
They did provide documentation that they "said" they tested hundreds of times.  Their documentation reads like this:

-  Create a new virtual directory under the Default Web Site named MyeFAACT
-  Create your Web Server Certificate (Default Website > MyeFAACT > Properties > Directory Security tab > Server Certificate button) and apply for an SSL Certificate from any SSL certificate provider you choose.  You should not use a self signed certificate.

I've tested it and it DOES NOT WORK.  I told them that I tested it, but they said "I was mistaken" because they have tested it hundreds of times.  
0
 
2PiFLCommented:

What happens if you de-select "Require secure channel" on the default website?
0
 
bsimmons2376Author Commented:
That is the way it is currently setup.  I requested the SSL certificate from the Default Web Site properties and installed it on the Default Web Site.  The only sub folder that is set to "Require Secure channel" is the MyeFAACT directory.  However, tech support is telling me I need to rekey the certificate for only the MyeFAACT directory, which it won't allow you to do.  They swear up and down that they have tested it.  Has anybody else out there been able to do this?
0
 
bsimmons2376Author Commented:
Thank you for your help.  The tech support finally came back and said that their instructions were wrong, and that the SSL certificate would have to be installed at the website level.
0

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now