Microsoft Sharepoint Products and Technologies Resource Kit eBook

Chapter 27: Securing an Extranet Using SSL and Certificates 747
15. Open a new browser window, and type https://server_name/test
/default.htm.
As before, you can ignore the warning “Revocation information for the security
certificate for this site is not available.” To continue, click Yes.
If an authentication prompt appears, type your user name and password, and
then click OK. If the test page appears, it means that SSL is correctly enabled on the
server that you are testing. If it doesn’t appear, go to the next section.
Portal Site or Test Page Fails to Display on One or More Front-End Web
Servers
Summary
If the home page of the portal site or test page does not appear, check the event log
for an error with an Event Source of Schannel, an Event ID of 36869, and a description
stating that “The SSL server credential’s certificate does not have a private key
information property attached to it.” This most often occurs when a certificate is
backed up incorrectly and then later restored. This message can also indicate a certificate
enrollment failure.
If this event ID exists, perform the steps from the section “Inheritance Overrides
Not Accepted” earlier in this chapter. Then follow the instructions in this chapter
starting with the procedure “To export the server certificate from the primary
front-end Web server.” The error was most likely due to the use of an alternate
method for exporting the server certificate, and the private key was not included.
If this event ID does not exist, check your network connections and network
connectivity, or restart your server.
In this chapter, we looked into how to protect the SharePoint Portal Server deployment
by enabling and configuring SSL on the front-end Web servers. This process
consists of multiple steps, including obtaining a server certificate and installing it on
all front-end Web servers, validating the certificate, requiring SSL, and modifying
search settings to include the content of a SSL-protected site in the index. You might
also need to configure import settings for user profiles via secure LDAP. Depending
on your requirements, you might require client certificates to provide two-level
authentication and create a Certificate Trust List to make sure that only the clients
with certificates from the trusted CAs are allowed to connect to your site.