How to enhance IIS server security

We know that because the NT system is easy to maintain, more and more small and medium-sized enterprises are using it on their own websites and internal office management systems, and many of them use the default IIS server for WEB servers.

Of course, it cannot be denied that the recent vulnerabilities that threaten the NT System are caused by improper configuration of the IIS server. It is foreseeable that many new vulnerabilities and security problems will be discovered on the IIS server in the future, however, as long as we make reasonable security configurations, we can still avoid many security risks.

This article does not systematically describe how to configure the IIS server in full security. I just want to enhance the security of the IIS server by using SSL to encrypt the HTTP channel. In our previous teaching, we have explained how to establish an SSL security mechanism for IIS servers.

In the example of WINDOWS Server version, we first need to add and delete WINDOWS Components in the control panel to install the Certificate Service, this service is not installed in the system by default. You need to install it on a CD.

Since this is the first configuration, we chose to create a new certificate. Use the default site name and encryption length settings. After the certificate is issued successfully, find the issued certificate in the issued certificate, double-click its attribute column, and then select copy certificate to file in details.

We need to export the certificate to a file. Here we export the certificate to the c: SQL. cer file. Return to the WEB management interface of the IIS server and select a new certificate application. At this time, the certificate request is suspended.