關於IIS使用SSL的憑證?

[smokehouse]

各位先進 您們好
我有一個問想請教一下
我有單一台Windows2003裝有IIS 6.0冰更新至最新
我希望任何人登入這台網頁都是利用憑證做加密
我看過說明再利用網頁伺服器憑證精靈來達到憑證加密
但是我可以不向CA或其他第三方單位申請憑證?
而單純利用IIS自做憑證給內部使用者作為SSL加密認證嗎?
我知道系統有提供Certificates Services的功能必須整合AD
但是我的環境並沒有AD

所以想請問 我可以只從IIS本機製作憑證並利用來做SSL加密嗎?
單純給內部人使用不對外?
如果可以要如何做呢?

[Bernard Cheah [MVP]]

You can create your standalone CA without the need for an AD domain.
refer
Using Certificate Server 2.0 to Generate a Server Certificate for Use with
IIS 5.0
http://support.microsoft.com/?id=228984

HOW TO: Configure SSL in a Windows 2000 IIS 5.0 Test Environment by Using
Certificate Server 2.0
http://support.microsoft.com/?id=290625

most of the steps apply to w2k3 as well.
--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://msmvps.com/blogs/bernard/

???? ???
??????????
?????Windows2003??IIS 6.0??????
?????????????????????
????????????????????????
???????CA?????????????
?????IIS????????????SSL??????
????????Certificates Services???????AD
?????????AD
????? ?????IIS???????????SSL????
????????????
??????????

[smokehouse]

Dear Bernard

我已經在微軟網站找到相關文件
並已經根據文件上完成SSL的憑證

謝謝您

Cloud

"Bernard Cheah [MVP]" 來函：

Post by Bernard Cheah [MVP]
You can create your standalone CA without the need for an AD domain.
refer
Using Certificate Server 2.0 to Generate a Server Certificate for Use with
IIS 5.0
http://support.microsoft.com/?id=228984
HOW TO: Configure SSL in a Windows 2000 IIS 5.0 Test Environment by Using
Certificate Server 2.0
http://support.microsoft.com/?id=290625
most of the steps apply to w2k3 as well.
--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://msmvps.com/blogs/bernard/

???? ???
??????????
?????Windows2003??IIS 6.0??????
?????????????????????
????????????????????????
???????CA?????????????
?????IIS????????????SSL??????
????????Certificates Services???????AD
?????????AD
????? ?????IIS???????????SSL????
????????????
??????????

[Bernard Cheah [MVP]]

Great !
--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://msmvps.com/blogs/bernard/

Post by smokehouse
Dear Bernard
§Ú€wžgŠb·L³nºô¯ž§äšì¬ÛÃö€å¥ó
šÃ€wžg®ÚŸÚ€å¥ó€W§¹ŠšSSLªºŸÌÃÒ
ÁÂÁ±z
Cloud
"Bernard Cheah [MVP]" šÓšç¡G

Post by Bernard Cheah [MVP]
You can create your standalone CA without the need for an AD domain.
refer
Using Certificate Server 2.0 to Generate a Server Certificate for Use with
IIS 5.0
http://support.microsoft.com/?id=228984
HOW TO: Configure SSL in a Windows 2000 IIS 5.0 Test Environment by Using
Certificate Server 2.0
http://support.microsoft.com/?id=290625
most of the steps apply to w2k3 as well.
--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://msmvps.com/blogs/bernard/

???? ???
??????????
?????Windows2003??IIS 6.0??????
?????????????????????
????????????????????????
???????CA?????????????
?????IIS????????????SSL??????
????????Certificates Services???????AD
?????????AD
????? ?????IIS???????????SSL????
????????????
??????????