MS IIS
(Microsoft Internet Information Services)

My Notes

• SSL & MS IIS Web Server v5.0 - SSL and IIS v 5.0
• Self Generating Certificates for IIS - my notes on creating Certificates for Development purposes only.
• SSO (Single Sign On) Products - my notes on securing content on IIS by using SSO products.
• IIS Directory and File Protection - products that use ISAPI filters to protect content (directory/files) on the MS IIS web server.
• IIS Error: DCOM - HTTP500 - Issue with IIS running Applications.
• IIS Log files - C:\WINNT\system32\LogFiles
• Misc IIS Info
  • Restarting IIS
    c:\>iisreset - Will restart IIS from the command prompt.
  • IIS Logs
    • d:\inetpub\mailroot\Badmail - bad mail 
      (Configure: IIS Manager, Right click on SMTP server, Messages tab, Badmail Directory)
    • C:\WINNT\system32\LogFiles - email & ftp errors.

Other Info

• Install (XP & Win 2000 Profesional)
  • Control Panel
  • Add/Remove Programs
  • Click "Add/Remove Windows Components"
  • Select "Internet Information Services (IIS)"
  • Click "Details"
  • Make sure that at least "World Wide Web Server" is selected.
  • Click OK, then "Next"
  • After the install, reboot your computer.
  • To test, open a browser on the computer and enter:  http://localhost
    (Note: You can also choose:  http://localhost/localstart.asp)
    You can see the version on this page.
    You can also launch the Documentation (which may launch in a separate window).
• Version of IIS
  • URL: http://localhost/localstart.asp
  • ASP page that will give you the version (and other info)
    ex_iis_version.asp.txt (click to veiw code) - cut-n-paste this code into a file with the extension of .asp (remove the .txt).  Then place on your web server.
• Other host names for your local install of IIS:
  http://localhost/localstart.asp
  http://127.0.0.1/localstart.asp - may require Windows Authentication.
  http://<your computer name> -
  • The firewall "ZoneAlarm" will cause the http://<computername> to give a 404 error.
• Host name configuration file: (I think this is only used by Win98)
  c:\windows\system32\drivers\etc\host
• Internet Services Manager - problems (recreate)
  • The shortcut should be under:  Start, Control Panel, Administrator Tools, Internet Services Manager.
  • Steps to recreate the shortcut (because mine didn't get created on one of my PC's)
    • Programs, Control Panel, Administrative Tools
    • Right click, new, Shortcut
    • Target: %SystemRoot%\system32\inetsrv\iis.msc
    • Start in: C:\WINDOWS\system32\inetsrv
    • Comment: Manages IIS, the web server for Internet and intranet web sites.
    • Use the other defaults
    • Click "Apply", then "OK"
  • Re-Register the IIS dll if you get the following error when trying to run "Internet Service Manager":
    Snap-in failed to initialize. Name:<unknown> CLSID: etc.....
    • Start, Run, type cmd.exe and press ENTER
    • regsvr32 %systemroot%\system32\inetsrv\inetmgr.dll
    • You should see a windows window that says: DLLRegisterServer in ...... succeeded
    • Now you can try running the Shortcut in the bullet above or place the following in Windows Explorer:
      %SystemRoot%\system32\inetsrv\iis.msc
• IIS install problems and Firewalls
  • ZoneLabs - Change the items below to allow http://<computername> to work.
    Launch ZoneLabs:  Start, Programs, Zone Labs, Integrity Client (or right click on the ZoneLabs Icon in the tray)
    • Program Control, Programs. 
      • Locate the program "Internet Infromation Services" or "inetinfo.exe" (%SystemRoot%\system32\inetsrv\inetinfo.exe).  Make each column have a check mark instead of an "X".
    • Program Control, Components,
      • svcext.dll (Services IISAdmin Extension DLL) - Allow.
      • metadata.dll (IIS MetaBase DLL) - Allow.

SSL Server Certificate (Certification Authority)

• Self Generating Certificates for IIS - my notes on creating Certificates for Development purposes only.
• Terms
  • CA - Certifying Authority or Certification Authority
  • SSL - Secure Socket Layer
  • Digital Certificates
  • Trusted Certificate Authorities
  • Private Keys
  • Keystore - where keys (certificates etc...) are stored.
• CAs (Certifying Authority)
  • VeriSign (http://www.verisign.com)
  • SecureLook (http://www.securelook.com)
  • Thawte (http://www.thawte.com)
  • GeoTrust (http://www.verisign.com)
  • Starter SSL
  • Entrust.net
• Keys
  • Public Key Management - Control Panel, Administrative Tools, Public Key Management
  • Keytool
    • http://java.sun.com/j2se/1.5.0/docs/tooldocs/windows/keytool.html.
    • The password for the default keystore 'cacerts' is 'changeit' if that's any help ?
    • http://wls.wwco.com/security/private-ca.html
• secure server software
  • Certificate Manager Tool (Certmgr.exe)
  • CertGen utility
  • MakeCert Creates a test X.509 certificate.
    Cert2SPC Creates a test software publisher's certificate (SPC).
    MakeCTL Creates a certificate trust list (CTL). MakeCTL is also available in a wizard that allows the user to make a CTL by using a graphical user interface instead of a Command Prompt window.
    CertMgr Manages certificates, CTLs, and certificate revocation lists (CRLs).
     
  • Sun Microsystem's keytool utility
  • Self-generating Cers
    • http://www.iis-resources.com/modules/AMS/article.php?storyid=459