Secure Communications

(This feature is only available for Windows NT Server installations.)

Use this dialog box to establish a Secure Sockets Layer (SSL) encrypted communication link with Web site visitors using a Web browser that supports secure communications (URLs starting with https:// ). This means that all of the information in both the HTTP request and response is fully encrypted, including the any information exchanged between the user and your Web server.

Use the secure communications feature to protect sensitive information, such as credit card numbers or medical records.

Before you can use your Web serverÆs SSL security features, you must obtain a valid server certificate from a trusted, third-party organization, called a certificate authority. Use Key Manager to request a server certificate from a certificate authority and to create an SSL authentication key-pair.

Note In order to use Key Manager to create an SSL key pair and server certificate request, you must use Internet Service Manager on the computer which is the server; that is, you cannot access Key Manager remotely using Internet Service Manager (HTML).

After you receive your server certificate, you can use Key manager to install the certificate and attach it to your authentication key-pair. You also use Key Manager to manage multiple certificates and to install certificates on remote Web servers.

For more information, consult your Web server security documentation.

Require Secure Channel when accessing this resource

Select this check box to require an encrypted communication link for a Web browser to connect with this Web site, directory, or file.

Note The default encryption strength (Require Secure Channel selected, Require 128-bit Encryption cleared) is 40-bit.

Client Certificate Authentication

(This feature is only available for Windows NT Server installations.)

When you select this check box, you can configure your Web server to either accept, require, or reject client certificates as a means of establishing a connection with a particular file or directory. A client certificate is a digital identification issued by a trusted, third-party organization, called a certificate authority.

Do Not Accept Client Certificates

Users logging on with a client certificate, who attempt to connect to a file or directory resource for which this setting is enabled, will be denied access.

Accept Certificates

 Users can access a file or directory with a client certificate, but the certificate is not required.

Require Client Certificates

Only users logging on with a valid client certificate can connect to a file or directory resource for which this setting is enabled. Users without a valid client certificate will be denied access.

Enable Client Certificate Mapping

Select this check box to configure your Web server to authenticate users who log on with a valid client certificate. Your Web server uses a mapping to match information contained in a clientÆs certificate against Windows NT account information. If the certificate information matches account information, your Web server will automatically map the client to a particular Windows NT user account, thus authenticating and granting that user access to a restricted resource.

You can use the client certificate mapping feature to do the following:


© 1997 by Microsoft Corporation. All rights reserved.