Re: Configure IIS to install certificate and enable SSL   

There's many ways to do all those tasks, and recommendation really
depends on your requirements.

For example, to install certificates, you can use:
1. CAPICOM ActiveX component
2. System.Security.Cryptography.X509Certificates .Net namespace

And to configure IIS for the other two steps, you can use:
1. ABO
2. ADSI / WMI
3. System.DirectoryServices (ADSI wrapper) / System.EnterpriseServices
(WMI wrapper) .Net namespace

You can access those technologies via a variety of languages and
runtimes. For example:
1. ActiveX component favors Windows Scripting language (JScript/
VBScript) hosted either on the commandline via Windows Scripting Hosts
like CSCRIPT or WSCRIPT, or an environment like ASP
2. ADSI/WMI also favors Windows Scripting language
3. System.Security.Cryptography.X509Certificates ,
System.DirectoryServices, and System.EnterpriseServices favor .Net
languages and runtimes like the commandline or ASP.Net

To me, I see no "recommended" language -- Microsoft and Windows give
you all the choices to do whatever is comfortable.

You can pretty easily investigate all these routes online with MSDN.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//





On Sep 4, 1:22 am, dave-o  wrote:
> David,
>
> In the steps you have identified I need to do steps 2-4 in an automated
> fashon. The way we have things set up here requires us to use Certificate
> Services as the enviroment we have is only tempary.
> What scripting language would you recomend to complete these tasks?
>
> Many thanks,
>
> David
>
>
>
> "David Wang" wrote:
> > On Aug 30, 5:58 am, dave-o  wrote:
> > > Hi all, as per the subject I need to install a certificate and enable SSL. I
> > > have certificate services installed on a diffrent server. As a manual task
> > > this is simple and easy to complete.
> > > My problem howevr comes by my job role. I am an intergration engineer and do
> > > automated builds of servers through RIS and many many scripts. However im
> > > stumped on this one.
> > > how do I get IIS to intall the certificate through a automated script? Also
> > > to get SSL enabled. Although I think I can automate this witha bit of
> > > research.
>
> > The entire sequence looks like this:
> > 1. You create the certificate
> > 2. You install the certificate on the server
> > 3. You configure IIS to load the certificate in #2
> > 4. You configure IIS to enable SSL with the certificate loaded in #3
>
> > All four can be automated, though most people only think of doing #4
> > and forget to do all three pre-reqs.
>
> > Also, you don't need Certificate Services unless you already have PKI
> > setup in your local domain and need it to produce certificates signed
> > by your local CA.
>
> > Given this information, what do you want to automate?
>
> > //David
> >http://w3-4u.blogspot.com
> >http://blogs.msdn.com/David.Wang
> > //- Hide quoted text -
>
> - Show quoted text -

date: Wed, 05 Sep 2007 06:03:33 -0000   author:   David Wang