How to ensure full security of IIS servers

Because the NT system is easy to maintain, more and more small and medium-sized enterprises use it on their own websites and internal office management systems, and many use the default IIS server for WEB servers. Of course, it cannot be denied that the recent vulnerabilities that threaten the NT System are caused by improper configuration of the IIS server. It is foreseeable that many new vulnerabilities and security problems will be discovered on the IIS server in the future, however, as long as we make reasonable security configurations, we can still avoid many security risks.

This article does not systematically describe how to configure the IIS server in full security. I just want to enhance the security of the IIS server by using SSL to encrypt the HTTP channel.

For example, we need to add and delete WINDOWS Components in the control panel to install the Certificate Service, this service is not installed in the system by default. You need to install it on a CD.

Then select the installation type of the independent Root CA. In the next step, give your CA a name to complete the installation.

After the installation is complete, we can start our IIS Server Manager to apply for a digital certificate, and start INTERNET manager to select the WEB site we need to configure:

Select Directory Security-secure communication-server certificate in site properties.