Microsoft Sharepoint Products and Technologies Resource Kit eBook

Chapter 27: Securing an Extranet Using SSL and Certificates 739
1. On the Site Settings page, in the User Profile, Audiences, and Personal Sites
section, click Manage profile database.
2. On the Manage Profile Database page, in the Profile and Import Settings
section, click the link next to Source of user set.
3. On the Configure Profile Import page, in the Source section, click Custom
source, and then click OK.
4. On the Manage Connections page, rest the pointer on the name of your connection,
click the arrow that appears, and then click Edit on the menu that appears.
5. On the Edit Connection page, in the Connection Settings section, ensure that
the Use SSL-secured connection check box is selected.
6. Click OK.
Note You must have secure LDAP enabled on your domain. For instructions
on configuring secure LDAP, refer to http://go.microsoft.com/fwlink
/?LinkId=20732 and http://go.microsoft.com/fwlink/?LinkId=20735.
To require client certificates (optional)
This step is optional. You might require client certificates to provide additional
security for accessing your portal site from outside the firewall. When you request
certificates from the clients, it means that clients that do not have certificates
installed will not be able to access the portal site. For example, you might require
client certificates if you need a stronger two-level authentication, in which clients
are required to provide something they have (a certificate) and users are asked to
provide something they know (authentication credentials).
To require client certificates, do the following on each front-end Web server:
1. Open Internet Information Services (IIS) Manager. In the Internet Information
Services management console, expand the tree view, and then expand Web
Sites. Right-click Default Web Site, and then click Properties.
2. Click the Directory Security tab.
3. In the Secure communications section, click Edit.
4. In the Secure Communications dialog box, make sure the Require secure
channel (SSL) check box is selected, and in the Client certificates section,
click Require client certificates.
5. Click OK to close the Secure Communications dialog box, and then click
OK to close the Default Web Site Properties page.