?
Solved

IIS: Wildcard certificates and IP addresses

Posted on 2015-01-29
4
Medium Priority
?
65 Views
Last Modified: 2015-02-12
Hello,

I have a Windows 2008 server running IIS 7. I have multiple wildcard certificates installed. I've learned that I can't assign multiple certificates to different sites if they're running on the same IP address.

How do I tell it:

IIS Site XYZ runs on IP address xxx.xx.xx.xx
IIS Site ABC runs on IP address aaa.aa.aa.aaa

THanks in advance.
0
Comment
Question by:skbohler
  • 2
4 Comments
 
LVL 31

Expert Comment

by:Rich Weissler
ID: 40578298
In the Internet Information Server (IIS) Manager, go to each site.  On the site, right-click and select bindings.  In the binding for each site, for https, you can specify the IP address and which certificate is to be used.
0
 
LVL 29

Assisted Solution

by:Dan McFadden
Dan McFadden earned 1000 total points
ID: 40579435
I would first verify that you have more than 1 IP address configured on the server.  If not, you will have to assign an additional IP address to the server.

To verify the IP config from the command prompt:

1. open a command prompt
2. type:  ipconfig

It you have more than one IPv4 Address configured on the server, the ipconfig output will look something like this:


Ethernet adapter Server-Netz:

   Connection-specific DNS Suffix  . : your-domain.ext
   IPv4 Address. . . . . . . . . . . : 10.138.1.55
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   IPv4 Address. . . . . . . . . . . : 10.138.1.56
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   IPv4 Address. . . . . . . . . . . : 10.138.1.57
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   IPv4 Address. . . . . . . . . . . : 10.138.1.58
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.138.1.1

If this is what you see, go into IIS Manager and do what Rich Weissler mentioned.

If you have only one IPv4 Address assigned, you will need to acquire a new IPv4 Address from your Network team, add it to the network card, verify that ipconfig reports more than 1 IPv4 address, then go into IIS Manager.

Dan
0
 

Author Comment

by:skbohler
ID: 40579538
I have 4 IP addresses available. But, when I tried assigning one website to one of the IP addresses, the website was no longer available. Does the DNS A record IP address have to then match the IP address chosen?
0
 
LVL 31

Accepted Solution

by:
Rich Weissler earned 1000 total points
ID: 40579545
Yes, if you tell the webserver that a site will use a specific IP address, the DNS record for that website must match the IP address.  (And there can be intervening records, but doing it with an A record would be the most straight forward way to do it.)
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Today I came across an interesting issue that had me pulling my hair out.  I was troubleshooting a new internal web site which uses integrated security instead of anonymous.  When browsing the site from my laptop, I was able to access it with no iss…
First of all, clustering IIS is something you should rarely consider doing. In almost all cases, Microsoft Network Load Balancing (NLB) (http://technet.microsoft.com/en-us/library/cc758834(WS.10).aspx) is a much better solution when you need to p…
Integration Management Part 2
How can you see what you are working on when you want to see it while you to save a copy? Add a "Save As" icon to the Quick Access Toolbar, or QAT. That way, when you save a copy of a query, form, report, or other object you are modifying, you…
Suggested Courses
Course of the Month12 days, 15 hours left to enroll

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question