Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a website for example I want to apply SSL settings on Particular Folder in this site. I followed following steps.

(1) Import Certificate in IIS 7. (2) Create SSL Bindings. (3) Select folder in website and set required ssl.

Now my problem is that I want one particular folder to require SSL not overall site. By Following above steps. I can browse whole site with both http and https.

I want whole site to be browsed by only http and the particular folder in website to be browsed using only https.

Like - and -

Thanks in advance.

share|improve this question

IIS requires you to do site-level bindings for certificates. In fact, every web server on the planet works this way, it's not possible to bind SSL on a subfolder only.

That doesn't mean it's not possible though. You want to look into a method called "URL ReWriting" - basically, you need to configure your ReWrite rules to detect either HTTP or HTTPS and if they land on a page you want to go HTTP, but they're on HTTPS, then redirect them, and vice versa. This is done invisibly to the user, they will just silently move from HTTP to HTTPS (going from HTTPS to HTTP is not always as seamless, depending on the users browser settings).

IIS7 does have a native ReWriting module, but I prefer the ISAPI ReWrite Module.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.