logo_michael-thomas.jpg (3143 bytes)

MS IIS
(Microsoft Internet Information Services)

My Notes

bulletSSO (Single Sign On) Products - my notes on securing content on IIS by using SSO products.
bulletIIS Directory and File Protection - products that use ISAPI filters to protect content (directory/files) on the MS IIS web server.
bulletIIS Error: DCOM - HTTP500 - Issue with IIS running Applications.
bulletSelf Generating Certificates for IIS - my notes on creating Certificates for Development purposes only.
bulletIIS Log files - C:\WINNT\system32\LogFiles
bulletMisc IIS Info
bulletRestarting IIS
c:\>iisreset - Will restart IIS from the command prompt.
bulletIIS Logs
bullet d:\inetpub\mailroot\Badmail - bad mail 
(Configure: IIS Manager, Right click on SMTP server, Messages tab, Badmail Directory)
bullet C:\WINNT\system32\LogFiles - email & ftp errors.
bullet

Other Info

bulletInstall (XP & Win 2000 Profesional)
bulletControl Panel
bulletAdd/Remove Programs
bulletClick "Add/Remove Windows Components"
bulletSelect "Internet Information Services (IIS)"
bulletClick "Details"
bulletMake sure that at least "World Wide Web Server" is selected.
bulletClick OK, then "Next"
bulletAfter the install, reboot your computer.
bulletTo test, open a browser on the computer and enter:  http://localhost
(Note: You can also choose:  http://localhost/localstart.asp)
You can see the version on this page.
You can also launch the Documentation (which may launch in a separate window).
bulletVersion of IIS
bulletURL: http://localhost/localstart.asp
bulletOther host names for your local install of IIS:
http://localhost/localstart.asp
http://127.0.0.1/localstart.asp - may require Windows Authentication.
http://<your computer name> -
bulletThe firewall "ZoneAlarm" will cause the http://<computername> to give a 404 error.
bulletHost name configuration file: (I think this is only used by Win98)
c:\windows\system32\drivers\etc\host
bulletInternet Services Manager - problems (recreate)
bulletThe shortcut should be under:  Start, Control Panel, Administrator Tools, Internet Services Manager.
bulletSteps to recreate the shortcut (because mine didn't get created on one of my PC's)
bulletPrograms, Control Panel, Administrative Tools
bulletRight click, new, Shortcut
bulletTarget: %SystemRoot%\system32\inetsrv\iis.msc
bulletStart in: C:\WINDOWS\system32\inetsrv
bulletComment: Manages IIS, the web server for Internet and intranet web sites.
bulletUse the other defaults
bulletClick "Apply", then "OK"
bulletRe-Register the IIS dll if you get the following error when trying to run "Internet Service Manager":
Snap-in failed to initialize. Name:<unknown> CLSID: etc.....
bulletStart, Run, type cmd.exe and press ENTER
bulletregsvr32 %systemroot%\system32\inetsrv\inetmgr.dll
bulletYou should see a windows window that says: DLLRegisterServer in ...... succeeded
bulletNow you can try running the Shortcut in the bullet above or place the following in Windows Explorer:
%SystemRoot%\system32\inetsrv\iis.msc
bulletIIS install problems and Firewalls
bulletZoneLabs - Change the items below to allow http://<computername> to work.
Launch ZoneLabs:  Start, Programs, Zone Labs, Integrity Client (or right click on the ZoneLabs Icon in the tray)
bulletProgram Control, Programs. 
bulletLocate the program "Internet Infromation Services" or "inetinfo.exe" (%SystemRoot%\system32\inetsrv\inetinfo.exe).  Make each column have a check mark instead of an "X".
bulletProgram Control, Components,
bulletsvcext.dll (Services IISAdmin Extension DLL) - Allow.
bulletmetadata.dll (IIS MetaBase DLL) - Allow.

SSL Server Certificate (Certification Authority)

bulletSelf Generating Certificates for IIS - my notes on creating Certificates for Development purposes only.
bulletTerms
bulletCA - Certifying Authority or Certification Authority
bulletSSL - Secure Socket Layer
bulletDigital Certificates
bulletTrusted Certificate Authorities
bulletPrivate Keys
bulletKeystore - where keys (certificates etc...) are stored.
bulletCAs (Certifying Authority)
bulletVeriSign (http://www.verisign.com)
bulletSecureLook (http://www.securelook.com)
bulletThawte (http://www.thawte.com)
bulletGeoTrust (http://www.verisign.com)
bulletStarter SSL
bulletEntrust.net
bulletKeys
bulletPublic Key Management - Control Panel, Administrative Tools, Public Key Management
bulletKeytool
bullet http://java.sun.com/j2se/1.5.0/docs/tooldocs/windows/keytool.html.
bulletThe password for the default keystore 'cacerts' is 'changeit' if that's any help ?
bullet http://wls.wwco.com/security/private-ca.html
bulletsecure server software
bulletCertificate Manager Tool (Certmgr.exe)
bulletCertGen utility
bulletMakeCert Creates a test X.509 certificate.
Cert2SPC Creates a test software publisher's certificate (SPC).
MakeCTL Creates a certificate trust list (CTL). MakeCTL is also available in a wizard that allows the user to make a CTL by using a graphical user interface instead of a Command Prompt window.
CertMgr Manages certificates, CTLs, and certificate revocation lists (CRLs).
 
bulletSun Microsystem's keytool utility
bulletSelf-generating Cers
bullethttp://www.iis-resources.com/modules/AMS/article.php?storyid=459