Microsoft Sharepoint Products and Technologies Resource Kit eBook

Chapter 25: Firewall Considerations for SharePoint Portal Server Deployments 683
5. Verify that Certificate store text box points to the Personal store, and that
Place all certificates in the following store is selected.
6. In Completing the Certificate Import Wizard dialog box, click Finish.
7. Click OK to confirm the successful import of the certificate.
Configuring the Listener for Incoming Web Requests to Use a
Certificate
The next steps are to enable the listener for incoming Web requests to listen for
requests on TCP Port 443 (the default SSL port), and then to associate the listener
with the certificate you imported in the previous step.
To enable the listener for incoming Web requests to use the certificate, do the
following:
1. Open the ISA Management MMC console, right-click your server, and select
Properties.
2. In the Properties dialog box, click the Incoming Web Requests tab.
3. In the Identification section, select Enable SSL listeners. This is a global setting
for all listeners and cannot be configured on a per-listener basis.
4. After you’ve selected the check box, a message appears. It says that SSL
requests will be accepted only if each listener is configured with an appropriate
certificate. Click OK.
5. In the Identification section, highlight the listener you would like to configure
and click Edit.
6. In the Add/Edit Listeners dialog box, select the Use a server certificate to
authenticate to web clients check box, and then click Select.
7. In the Select Certificate dialog box, select the certificate you imported in the
previous section, and click OK.
8. In the Add/Edit Listeners dialog box, verify that the external FQDN of the
portal site is listed as the certificate common name in Use a server certificate
to authenticate web clients. In our example, it is external.contoso.com.
Click OK.
A warning appears that says that the changes will be applied only after
the restart of the Web proxy service. You can select either the Save the
changes, but don’t restart the service(s) option and then manually restart
the Web proxy service or the Save the changes and restart the service(s)
option. If you do not see the certificate in the Select Certificates dialog box,
check the steps undertaken in the previous sections to make sure that the certificate
has been exported correctly and that it has been added to the correct
certificate store.