Certificate

[CM]

I know I can create a certificate with my domain server running IIS (Windows
2000 Server). How can I have IIS require that certificate so client machines
can access the web pages on my domain server? And how can I export that
certificate so I can install them on the client machines? Basically, I want
to have any computer that wants to connect to my web server require the
certificate that I created on my web server. I do not know how to do that.

Please help, thanks.

CM

 

[Salt_Peter]

Configure a Certificate Authority to distribute certificates (Add/Remove
programs / Windows setup). Specify an SSL port in IIS virtual directory, Use
the security tab to require a certificate (in which case clients can only
access via https://www.whatever.com with a valid certificate). Certificates
can then be distributed by an IIS virtual directory.

You'll want to research what CA type you need/ want and whether you need to
map one certificate to multiple users, require admin aprouval, map to AD
accounts, etc... You'll get a fair amount of info from the CA / certificate
help files to get you started.

I'ld suggest testing the various options until you get what you're looking
for. And please: back up your keys. Specially where encryption and the
recovery agent is involved.

 

[CM]

Thank you very much,

CM

Configure a Certificate Authority to distribute certificates (Add/Remove
programs / Windows setup). Specify an SSL port in IIS virtual directory, Use
the security tab to require a certificate (in which case clients can only
access via https://www.whatever.com with a valid certificate). Certificates
can then be distributed by an IIS virtual directory.

You'll want to research what CA type you need/ want and whether you need to
map one certificate to multiple users, require admin aprouval, map to AD
accounts, etc... You'll get a fair amount of info from the CA / certificate
help files to get you started.

I'ld suggest testing the various options until you get what you're looking
for. And please: back up your keys. Specially where encryption and the
recovery agent is involved.