StartCom SHA256 SSL Certificate gives Chrome SHA1 error
I've carefully created a free StartSSL / StartCom SSL Certificate based on the SHA256 algorithm for my website:http://cloud.mdk-photo.comWhen using this certificate in IIS 7.5 (2008R2) and later 8.5...
View ArticleIIS 8 hardening Group Policies
Hi Experts,I'm planing to do IIS hardening activities in my network. Do we have some Security Template like Security Compliance Manager so that we can export to GPO and import to our IIS OU?I just got...
View ArticleIIS 8.5 offers all client certificates
Hi!Situation: WS2012 R2 / IIS 8.5, two way SSL is required, so client must have certificate for accessing website. While trying to access website, all certificates with authentication EKU are...
View ArticlePrinting pdf file from WCF web service
Hello,I'm trying to print a pdf document form a WCF web service with the following code:Dim info As New System.Diagnostics.ProcessStartInfo info.Verb = "print" info.FileName = "C:\MyFile.pdf"...
View ArticleWebserver Setup System32 and SysWow64 Uable to Grant Folder Permissions
Part 1 (not doing part 2 unless it is the only way)Background: We have a Windows 2012 Server running IIS 8.5. Behind the scenes we interface with other servers like paypal & banks etc....
View ArticleHow can we Run IIS without Admin in Devlopment
As per organization policy, Software should be installed by IT team only so in order to implement this, We have disabled the Admin rights to all users, everything is working fine except the .net...
View ArticleWS2012 IIS directory protection problem
Hello,I experience a strange problem :I have 2 accounts : test_1 and test_2I enable "Basic authentification" and disable "Anonymous authentification" in IIS on the directory I want to protect...
View ArticleIssues setting permissions consistently when using Octopus Deploy
Hi, I am currently observing some non-deterministic behavior with setting filesystem permissions through Octopus Deploy. The setup in question involves a Windows Server 2012 R2 machine, with it's...
View ArticleIssue connecting to IIS 7 (after upgrade from IIS 6, and OS upgrade) with a...
I have recently upgraded my 2003 server to 2008. IIS 6 upgraded to IIS 7. I had some shared drives that I was sharing via virtual directories on the server. I have installed the Desktop Experience...
View ArticleClr4IntegratedAppPool windows account
I have an application working in the IISExpress and after publishing it in IIS it stopped working. When I check the pool identity from applicationshost.config of IISExpress it's using...
View ArticleUpgrading IIS 7 to 8
my application is running normally on IIS7 but when i upgraded to IIS 8 i found this exception The input is not a valid Base-64 string as it contains a non-base 64 character, more than two padding...
View ArticleOCSP STAPLING: ForceURL Option
Hello,Is there a way to configure IIS to send OCSP requests to a Defined URL, instead of looking at the AIA field on the certificate similar to the mod_ssl "SSLStaplingForceURL"?<div...
View ArticleSelect a certificate to authenticate yourself Issue
Hi.. We are using network solutions wildcard certificate in our asp.net (IIS) applications. We are loading the another https url into our application iframe. While loading the url the browser throws...
View ArticleIIS in multiple forests
Hello,Does IIS support AD multi-forest? Is there any article out there that would actually show you how to set it up or test it? What are the steps needed to have IIS supported in an AD multi-forest...
View ArticleChanging the World Wide Web Publishing Service user account
Server Windows 2012 R2 IIS 8.5Hi, I have been told to change the user account associated with the World Wide Web Publishing Service to a domain user that has been configured as a local admin account....
View ArticleSecure Cookie not sent over SSL
In our web application we are facing security risk issue reported by the security scan team. The issue is, we have a cookie called opentoken and its set as a secure one. But while passing the through...
View ArticleIIS Client Certificate Mapping Authentication - mapping not working
I am trying to setup IIS Client Certificate Mapping Authentication and so far I have been unsuccessful.I have a valid client authentication certificate I disabled all authentication methods in the...
View ArticleSite showing spam content - files removed but still displaying
I have a site which has been hacked and displays a lot of SPAM content with links to other sites:http://tinyurl.com/p6vr6dtI have found and removed the malicious files - but the spam pages still...
View ArticleIIS 8 not Recognizing Windows Authentication using VS 2015
I for days thought my IIS 8 on Windows 2012 R2 wasn't configured for Windows Authentication. For days I uploaded my VS 2015 Website to my IIS 8 server and I cannot get the Windows.Indentity or the...
View ArticleCertificate not Saving to IIS?
Hello Ive purchased a certificate from ssls.com/, downloaded the files, and attempted to install (Many Times) This is the first time Ive dealt with certificates, so not 100% sure on the configuration -...
View Article