Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using Windows 2008 Server and IIS7.

Suppose I have one SSL certificate for both and bound to port 443 of my server. I cannot change the certificate.

Suppose also that both and point to my server in DNS, and I cannot change the DNS settings.

Is there any way to configure IIS to reject all requests to https: // (Requests to https: // should keep working.)

share|improve this question
up vote 0 down vote accepted

One option would be to simple create a website and bind it to the host header Have this website simply be a page declaring access denied.
share|improve this answer
Thanks! Couldn't find a way to do this for HTTPS through the IIS7 management UI, but I tried the command-line approach in the article you pointed to and it seems to work. – user22119 Oct 6 '09 at 18:15

The fact that the SSL certificate is valid for both URLs does not mean that the actual website in IIS has to have both sites bound to it. If you edit the Port 443 binding in IIS to include the hostname of, it will reject any and all requests from other host names, even if the other host names are specified on the certificate. Basically, the certificate is to confirm for the end user when they hit the site that they are hitting the right site, the certificate doesn't tell IIS what sites it must display though.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.