• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 360
  • Last Modified:

SSL for SharePoint

Any idea how to enable the current SharePoint 2010 with SSL ?

Currently, the Portal has supported several sites, some binded to different port while others create under /sites/xxx.

Do I need to change the web alternate path and change it from http to https ? Any steps or guideline is appreciate.


Tks
0
AXISHK
Asked:
AXISHK
  • 5
  • 3
1 Solution
 
Mohammed KhawajaManager - Infrastructure: Information TechnologyCommented:
Internally SSL is not used in majority of cases, however, SSL is used when connecting from the outside.  With one SSL certificate, you could host multiple SharePoint sites on the same server as long as your certificate is a wildcard type.  You will need to make changes in IIS as well as you will need alternate paths in SharePoint.

Refer to http://blogs.msdn.com/b/sharepoint_strategery/archive/2013/05/27/alternate-access-mappings-explained.aspx for more info.
0
 
AXISHKAuthor Commented:
Tks. How to create and load the SSL certificate on SharePoint ?
0
 
Justin SmithSr. System EngineerCommented:
Are you wanting to force all traffic over SSL, or allow users to use both?  If the latter, just extend the web application (Central Admin - Manage Web Apps - Extend) to another zone and specify SSL.  You'll then need to install the Cert to the binding on the extended site in IIS (not the original site).

If you want to force SSL and need to change the Default Zone URL to https, that is another story.  Best practice is to remove SharePoint from the IIS site then re-extend.  

http://blogs.msdn.com/b/russmax/archive/2013/02/27/how-to-properly-change-the-host-header-url-of-a-web-application-in-sharepoint-2010.aspx
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
AXISHKAuthor Commented:
"just extend the web application (Central Admin - Manage Web Apps - Extend) to another zone and specify SSL.  You'll then need to install the Cert to the binding on the extended site in IIS (not the original site)."

Any more instruction (or guideline) on this ?
0
 
Justin SmithSr. System EngineerCommented:
0
 
AXISHKAuthor Commented:
Internal URL                             zone                        Public URL for Zone
http://portal:8083                    Default                     http://portal:8083
http://portal                              Default                    http://portal
http://portal.abc.com              Extranet                  http://portal.abc.com
http://portal:8088                    Default                    http://portal:8081
http://ca01.abc.com:8081         Internet                   http://ca01.abc.com:8081

If I simply apply the ssl certificate under IIS mentioned below, does it equivalent to the your question "Are you wanting to force all traffic over SSL" ? Does it mean I can simplify request the SSL certificate under IIS and then modify the AAM ? Is that the setting that I need to go through (Configuration-3)

https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&actp=CROSSLINK&id=AR865

If I extend the web application, it will reuse same content even though I select "Use an existing IIS web site" and "Create a new IIS web site", correct ?

Should I put the entry as attached (Sharepoint1 & SharePoint2)
SharePoint1.png
SharePoint2.png
Configuration-3.png
0
 
Justin SmithSr. System EngineerCommented:
You cannot simply do something in IIS, you must tell SharePoint about it.  Meaning you must extend the web app or add a new zone URL before doing anything in IIS.

By force I mean the site will only respond to https requests.  If you try http you'll get an error or be routed to https.  In order to do that you'll need to change your default zone URL.

If you extend, yes, the same content.
0
 
AXISHKAuthor Commented:
Giving the created url above :
http://portal:8083                    Default                    http://portal:8083
http://portal                             Default                    http://portal
http://portal.abc.com               Extranet                  http://portal.abc.com

And I want to support :  https://portal:8083, https://portal & https://portsal.abc.com, I need to extend these one by one ?

In addition, when extend the website, it asked for port, but in fact, I need to use the same port, but only access it through https, what should I need under the port, public url and zone ?

Or, can I simply "add a new zone URL" as you mentioned ? What zone should I add - Internet ?

Great Tks.
0
 
AXISHKAuthor Commented:
Finally fix my problem, Tks
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now