Microsoft Sharepoint Products and Technologies Resource Kit eBook

Chapter 27: Securing an Extranet Using SSL and Certificates 741
3. In the Certificate dialog box, click the Certification Path tab. The certification
path should show no errors in the chain. If errors are shown, you must
download and install the certificate authority root on each front-end Web
server following the steps in “Obtaining and Installing the Certificate Authority
Root” in the “Troubleshooting” section at the end of this chapter.
4. Click OK to close the Certificate dialog box.
We will now create a certificate trust list (CTL). You must create a certificate
trust list on each front-end Web server.
Note After you create a certificate trust list, put all of your certificate
authorities for client and server certificates in this list. Do not create a new
certificate trust list for each certificate authority that you add.
To create a CTL, do the following on each front-end Web server:
1. Open Internet Information Services (IIS) Manager. In the Internet Information
Services management console, expand the tree view, and then expand Web
Sites. Right-click Default Web Site, and then click Properties.
2. Click the Directory Security tab.
3. In the Secure communications section, click Edit.
4. In the Secure Communications dialog box, select the Enable certificate
trust list check box, and then click New.
5. In the Certificate Trust List Wizard, do the following:
a. On the Welcome to the Certificate Trust List Wizard page, click Next.
b. On the Certificates in the CTL page, click Add from Store.
c. In the Select Certificate dialog box, select one or more certificates that
you want to use, and then click OK.
d. On the Certificates in the CTL page, click Next.
e. On the Name and Description page, type a name in the Friendly name
box, and then click Next. For example, you can use a friendly name such
as All CAs as a reminder to place all additional certificate authorities in
this one list.
f. On the Completing the Certificate Trust List Wizard page, click Finish.