IIS 7 / IIS 7.5 Security Best Practices (nothing official about it)

by vivek 7/4/2011 10:46:35 AM
We have IIS 7 released for quite some time now and we haven’t seen any best practices document released by Microsoft IIS 7 team. IIS 6 have good document in place and even though IIS 7 is secure by default, we need some document to keep us in-check. Here are few I prepared for myself: Installing IIS 7 / 7.5 Install IIS 7 / 7.5 with minimum required components. If a feature is not required e.g. Basic Authentication or Directory Browsing, do not install it. If you are using scripts to... [More]


ETag and IIS demystified

by rahul 3/17/2011 6:17:29 PM
Let me quote from Wikipedia straight away… <snip> An ETag, or entity tag, is part of HTTP, the protocol for the World Wide Web. It is one of several mechanisms that HTTP provides for cache validation, and which allows a client to make conditional requests. This allows caches to be more efficient, and saves bandwidth, as a web server does not need to send a full response if the content has not changed….. An ETag is an opaque identifier assigned by a web server to a specific version of a... [More]


MOSS 2007: Failed to create sample data. An exception of type Microsoft.SharePoint.SPException was thrown. Provisioning did not succeed. The site template was not provisioned successfully.

by vivek 8/24/2010 11:49:15 AM
I have been studying SharePoint for sometime and thought of installing SharePoint 2007 on my Windows Server 2008 R2 virtual machine. Finally, it gave me something to write about . During the installation process, SharePoint 2007 SP2 setup failed with an error Careful look at the configuration tasks showed it actually failed in step 8 As always I thought of looking at the issue further and checked the diagnostics file Task evalprovision has failed with an unknown exception Exception: M... [More]


Internet Explorer cannot display the webpage–after installing KB977377

by Vivek 7/21/2010 3:19:00 PM
Few days back, one of my colleague faced the above error when he accessed the web site that was hosted on a Windows Server 2008 SP2 machine which had IIS 7 installed and configured. Not sure what changed, but the error was very crude and didn’t give any information on what was causing it. This is a simple web service application which required client certificate authentication. With little or no information about what caused the issue we started troubleshooting the issue right f... [More]


Did you know: How to recreate “Default Web Site” in IIS 7 / 7.5

by vivek 5/27/2010 4:27:30 AM
Many a times you will find people delete the “Default Web Site” and then they install some application which require “Default Web Site”. Now, once you have deleted the Web Site how can you recreate or undelete the Web Site. Not possible unless you have a backup. Fortunately, there are workarounds in IIS 6 / 7 / 7.5 through which you can recreate the deleted “Default Web Site”. Does that mean you accidentally deleted a working Web Site and you can recreate it, the answer is “NO”. You can only re... [More]


“HTTP 404.17 – Not Found” on Win7 for Web Site that was build with .net 3.0 as the target framework

by vivek 5/25/2010 9:11:04 AM
Let me confess, I had to cook this up to give you this example. It happened to my colleague some days back when he developed a simple WCF application on Windows Server 2003 using VS2003. He selected “Target Framework 3.0” in the Property Page of that Web Site. He then deployed the application on his Win7 machine which has VS2010 with .net 4.0 installed. He fires the Web Site http://localhost/Service.svc and he gets “HTTP 404.17 – Not Found” when running the Web Site under Classic .NET AppPool.... [More]


Did you know: Configure Client Certificate Mapping in FTP 7.5 - Part 4

by Vivek 3/5/2010 9:09:00 AM
In this post, we will install a User Certificate, enable Named Mapping and test FTPS using a tool.Install User Certificate: Open Internet Explorer, and open the website https://server1/certsrv Click Request a Certificate Click User Certificate Click Yes on Web Access Confirmation (if it prompts) Click Submit Click Install this certificate You will get a confirmation that a user Certificate has been installed Confirm Client Certificate has been installed: Open Internet Explorer ... [More]


Did you know: Configure Client Certificate Mapping in FTP 7.5 - Part 3

by Vivek 3/4/2010 9:06:00 AM
In this post, we will create FTP Site on IIS and configure it to use Client Certificate. Create FTP Site: Open IIS Manager and right click on Sites Folder Click Add FTP Site… Enter the FTP site name: and select the Physical path for the site, click Next Select Binding and SSL settings as shown, I have selected the Server Certificate we requested above “newftpsite” under SSL Certificate. Click Next We won’t be selecting any Authentication m... [More]


Did you know: Configure Client Certificate Mapping in FTP 7.5 - Part 2

by Vivek 3/3/2010 9:02:00 AM
This is Part 2 of our series on implementing Client Certificate mapping in FTP 7.5. Today we will Install Server Certificate on IIS. In Part 1, I gave you a brief background of the environment we will be working on in our scenario. Issue Server Certificate Click on the computer name in IIS Manager and double click on Server Certificates   Click on Create Certificate Request… Fill in the textboxes as pe... [More]


Did you know: Configure Client Certificate Mapping in FTP 7.5 - Part 1

by Vivek 3/2/2010 8:56:00 AM
Client Certificate Mapping Authentication Role Service in IIS 7 and IIS 7.5 enables authentication between a Client and the Web Server by presenting client certificates over secure channel. In IIS 7 and IIS 7.5, Client Certificate Mapping Authentication uses Active Directory to map client certificates against a users account in a domain. NOTE: Client Certificate Mapping in FTP 7.5 is Active Directory One-to-One Mappings only. Here is Part 1 of a 4 Part series on implementing Client Certificate... [More]


Rahul Soni

Rahul Soni  Twitter

 LinkedIn

 Facebook

 Email me



Vivek Kumbhar

Vivek Kumbhar  Twitter

 LinkedIn

 Facebook

 Email me


Stack Exchange

profile for Vivek at Server Fault, Q&A for system administrators and IT professionals

profile for Rahul Soni at Stack Overflow, Q&A for professional and enthusiast programmers

Calendar

<<  February 2012  >>
MoTuWeThFrSaSu
303112345
6789101112
13141516171819
20212223242526
2728291234
567891011

View posts in large calendar

All Items
Sign in

Disclaimer

The opinions expressed herein are my own personal opinions and do not represent my employer's view in any way.
© Copyright 2012, Rahul Soni

Powered by BlogEngine.NET 1.4.5.0