Troubleshooting Lab

---

In this lab, you will troubleshoot a problem related to a browser error while establishing an SSL session. Read the following scenario and then answer the questions that follow. The questions are intended to reinforce key information presented in this chapter. If you are unable to answer a question, review the lessons and try the question again. You can find answers to the questions in the “Questions and Answers” section at the end of this chapter.

To prepare the computer for this troubleshooting lab, perform these steps:

1. Log on to the cohowinery.com domain on Computer1 using the Administrator account.

2. Use Windows Explorer to open the CD-ROM included with this book. Double- click the  Addhosts.bat file.

3. Open the Internet Information Services (IIS) Manager.

4. Expand Web Sites. Right-click Default Web Site, and then click Properties.

5. Click the Directory Security tab.

6. In the Secure Communications box, click Server Certificate.

   The Web Server Certificate Wizard appears.

7. Click Next.

8. Click Import A Certificate From A .PFX File, and then click Next.

9. Click the Browse button and then select the www.Adventure-Works.Com.pfx file on the CD-ROM included with this book. Click Next.

10. In the Password box, type password.

11. Click Next three times, and then click Finish.

12. Click OK.

Scenario

You are a systems engineer at Adventure Works, a publicly owned company that manages hundreds of sporting goods stores throughout the United States. You are in the process of deploying a Web site with the name www.adventure-works.com. To protect communications that include credit card numbers and personal information, you have installed an SSL certificate on your Web servers.

One of the members of your Quality Assurance (QA) team discovered a problem, however. SSL works fine when she accesses the site by using the URL http://www.adventure-works.com. However, her browser reports an error when she uses the URL https://adventure-works.com.

Questions

1. First, reproduce the error by using Internet Explorer on Computer1. What is the exact error message?

2. Examine the certificate. What is the cause of the problem?

3. How can you resolve the problem? (Choose all that apply.)

   1. Add the adventure-works.com common name to the certificate.

   2. Install a second SSL certificate with the name adventure-works.com on the same Web site.

   3. Create a second Web site using the IIS Manager, and configure that Web site with the host header adventure-works.com. Configure that Web site to redirect requests to http://www.adventure-works.com.

   4. Configure adventure-works.com to use a second IP address, and add that IP address to your Web server. Create a second SSL certificate with the name adventure-works.com, and associate that certificate with the second IP address.

   5. Add a redirection directive to the certificate to instruct the browser to send requests to https://www.adventure-works.com.

---