Server-Side Certificates

A server-side certificate is a certificate that is used to identify your Web server to end users. This type of certificate is often used on the Internet to provide SSL encryption for commercial Web sites, such as sites using Microsoft Site Server. In addition to providing SSL encryption so that communications between the browser and Web server cannot be easily captured and deciphered while in transit, digital certificates also authenticate the merchant you are dealing with.

To set up a Web page to use SSL, you need to take two steps. The first step involves installing the server-side digital certificate into IIS 4.0. The second step involves configuring your virtual directory and/or Web pages to require a secure channel. In the steps outlined below, we'll install a root CA certificate issued by Certificate Server into IIS 4.0.

  1. Start Internet Service Manager by choosing Start|Programs|Windows NT 4.0 Option Pack|Microsoft Internet Information Server|Internet Service Manager.
  2. Select the Default Web site icon.
  3. Click the Key Manager button on the toolbar.
  4. Select Key|Create New Key from the Key Manager window.
  5. In the Create New Key dialog box, select the Automatically Send The Request To An Online Authority radio button and choose Microsoft Certificate Server from the drop-down list box. Click Next.
  6. Enter a name and password for the new key. Click Next.
  7. Enter your organization, organizational unit, and common name.
  8. Enter your country, state/province and city/locality.
  9. Click Finish, and the new key will be generated for you and added to the Key Manager window. (See Figure 23-5.)
  10. Select the Server Bindings for this key. These settings determine which IP addresses and port numbers this certificate will be applied to. Click OK when finished.

click to view at full size.

Figure 23-5. The Key Manager, showing a key and its distinguishing information, which are installed into the WWW service in Windows NT 4.0.

To configure your Web application to require a secure channel, follow these steps:

  1. Start Internet Service Manager by choosing Start|Programs|Windows NT 4.0 Option Pack|Microsoft Internet Information Server|Internet Service Manager.
  2. Select the virtual directory or Web page that you want to secure.
  3. Right-click the item, and choose Properties from the context menu.
  4. In the Directory Security or File Security tab, click the Edit button in the Secure Communications group box.
  5. Check the Require Secure Channel When Accessing This Resource check box.

When creating a page that has a hyperlink to the secure area of your site, be sure to use https:// in the URL for the secure page instead of http://. This tells the Web server to use the secure HTTP protocol, HTTPS, and Secure Sockets Layer.



Programming Microsoft Visual InterDev 6. 0
Programming Microsoft Visual InterDev 6.0
ISBN: 1572318147
EAN: 2147483647
Year: 2005
Pages: 143

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net