Microsoft Sharepoint Products and Technologies Resource Kit eBook

732 Part VIII: Securing SharePoint Products and Technologies
2. On the Directory Security tab, in the Secure communications section, click
Edit.
3. In the Secure Communications dialog box, select the Require secure channel
(SSL) check box, and then click OK.
4. Click OK to close the Default Web Site Properties dialog box.
5. This step is critical. In the Inheritance Overrides dialog box, click Select All,
and then click OK.
Note If you do not accept the inheritance overrides, you must remove the
certificate, remove the requirement for SSL, and then start from the first procedure
in this chapter, “To ensure that you can access the home page of the
portal site.” See the “Troubleshooting” section at the end of this chapter for
the steps to remove the certificate and remove the requirement for SSL.
To test that the home page of the portal site is accessible over HTTPS
You should ensure that you can access the home page of the portal site by
using HTTPS with the NetBIOS name of the computer. Refer to the procedure “To
test that the home page of the portal site is accessible over HTTP and HTTPS” earlier
in this chapter for details of the warnings that might be displayed when you access
the site over HTTPS. As before, you can safely ignore them.
When you attempt to access the portal site by using HTTP, you should see a
page that states “The page must be viewed over a secure channel.”
If the home page of the portal site does not display when you access it using
HTTPS, see the “Troubleshooting” section at the end of this chapter.
To export the server certificate from the primary front-end Web server
We will now export the server certificate from the primary front-end Web server
so that we can install and use it on the remaining front-end Web servers. To export the
certificate, you must do the following on the primary front-end Web server:
1. Open Internet Information Services (IIS) Manager. In the console tree, expand
the computer name node, and then expand the Web Sites node. Right-click
Default Web Site, and then click Properties.
2. On the Directory Security tab, in the Secure communications section, click
Server Certificate.
3. On the Welcome to the Web Server Certificate Wizard page, click Next.
4. On the Modify the Current Certificate Assignment page, click Export the current
certificate to a .pfx file, and then click Next.