Hot answers tagged

24 votes

Is an SSL Cert needed for redirects?

A redirect from http://old.example.com to https://new.example.com does not require a certificate for old.example.com. But a redirect from https://old.example.com to https://new.example.com does. If ...
17 votes

Is an SSL Cert needed for redirects?

Yes, you will need a new certificate if the redirection is done in a HTTP response (a 301 or 302 return code). If you don't the redirect will not work, visitors of the old domain will get an error the ...
  • 1,837
13 votes
Accepted

Windows Server 2012 R2 IIS 10 / HTTP/2

No, IIS is a integrated part of the OS and can't be separately upgraded to a newer version. HTTP/2 especially isn't implemented in IIS, but in a kernel mode driver that is naturally only available in ...
  • 97.9k
12 votes
Accepted

Manage Multiple IIS servers without shared configuration

Configuration Editor within IIS Manager does exactly this. Creates a script of the actions that you have recently performed. Opens the Script Dialog window that displays the script for your action ...
12 votes
Accepted

Sync Two IIS 8.5 Server configurations only excluding bindings

Got it (Make sure you are using CMD ADMIN and Powershell ADMIN) Using CMD, it will not work in powershell not sure why it doesn't. msdeploy -verb:sync -source:webserver,computerName=acd-pv01 -dest:...
10 votes

First request after a while always slow - ASP.NET MVC / IIS 8.5 / Windows Server 2012 R2 VPS

The problem is, you need to install the IIS feature Application Initialization. Then it should work with your configuration. The image is from Rick Strahl's blog: Also remember to set: Start Mode ...
9 votes
Accepted

How to IP restrict access to a website in IIS8,5 (Windows 2012R2)

If the IP Security under IIS Windows Features is installed you could add this to your web.config to block IP's: <location path="Default Web Site"> <system.webServer> <security&...
  • 234
9 votes
Accepted

Convert Crt and Key to Pfx

Save certificate and key files with identical names in the same folder (cert.cer and cert.key, for example) and use certutil: certutil -mergepfx cert.cer cert.pfx and enter PFX password.
  • 6,544
8 votes

Why do we frequently have to re-start the default web site to prevent errors 500 after a page edit?

You need to determine the reason for the 500 error. It's usual to look in your logs for more detail and work out from there. You should also take a look at the excellent answer to this Q&A which ...
  • 115k
8 votes
Accepted

'Same HTTPS binding' error using IIS

If you only have one IP address, you need to set all sites that are using HTTPS to require Server Name Identification so that IIS knows what cert to use for clients connecting to which site. Either ...
  • 1,141
7 votes
Accepted

How does HTTP OPTIONS method determine allowed methods in IIS 8.5?

Interesting question. All the methods to remove response headers from IIS don't seem to work for the Allow and Public headers, an OPTIONS request always returns: Allow: OPTIONS, TRACE, GET, HEAD, ...
7 votes
Accepted

ASP.NET application on "IIS 8.5" on "Windows Server 2012 R2" performs poorly compared with "IIS 7.5" on a "Windows Server 2008 R2"

I believe this has been covered in several places, but the Balanced power plan can cause excessive transitions between performance states. This results in exceptionally poor performance, and affects ...
  • 34.7k
7 votes
Accepted

IIS sends incorrect intermediate SSL certificate

It is not IIS fault. Looks like you downloaded wrong intermediate CA certificate or incorrectly merged certificates with OpenSSL. IIS internally builds certificate chain and uses these certificates (...
  • 6,544
7 votes
Accepted

IIS 8.5 Serve file with no extension from particular folder

Have you tried with just a dot? <mimeMap fileExtension="." mimeType="application/octet-stream" />
  • 1,965
7 votes
Accepted

Create FastCGI application with PowerShell

I was working on the same problem. This script will update your apphost config to create both the FastCGI process pool and the handler mapping. import-module WebAdministration #######################...
  • 86
6 votes

Lsass.exe high CPU usage and causing request queuing on webserver

After enabling TLS 1.2 (also 1.0 and 1.2) on Windows 2012 R2 and 2008 R2 SP1, process lsass.exe began to overload CPU. I used the IISCrypto40, click "Best Practices", and in "Key Exchanges Enabled" ...
6 votes
Accepted

What is the meaning of an IIS http status code 404.503?

A quick review of the site in question solved this question. It was setup with IP Address Restrictions, the 404.503 is logged for every request that is not from an allowed IP address. Normally a 403 (...
6 votes

WebDeploy 3.6 won't connect with TLS 1.0 disabled

We added registry keys to force the .NET app pool over to TLS 1.2. This was to allow an app to talk to Salesforce after SF issued a critical update disabling TLS 1.0. The registry keys apply to the ...
  • 61
5 votes
Accepted

FTPS on IIS 8.5 Error on Command: LIST

It seems you are using Passive mode. Passive mode uses TCP ports from 1024 to 65534 for Data channel. Make sure no Firewall is blocking this port range. Else, switch to active mode to only use TCP/...
  • 13k
5 votes

Does IIS 8.5 support wildcard host header binding?

Worth noting that IIS 10.0 does support wildcard host names, see: http://www.iis.net/learn/get-started/whats-new-in-iis-10/wildcard-host-header-support
  • 384
5 votes
Accepted

Server sent passive reply with unroutable address. Using server address instead IIS 8.5

You need to set the external IP of your server to have passive mode work. In IIS: (step 5 for passive mode, other are for active mode) How to configure the global firewall settings for the FTP ...
  • 16.5k
5 votes

Coming from Azure to AWS, AutoScaling EC2 IIS & Deployments don't make sense

You have two main options: Pre-bake your application and configuration into an AMI, which the ASG uses to launch new instances. Use the user-data launch configuration field to have the instance ...
  • 109k
5 votes

Enabling Brotli compression on IIS

It appears the Brotli module you referenced requires a paid license, so I haven't tried it, but I encountered a similar issue with my own open source Brotli plugin for IIS. Current browsers advertise ...
4 votes

How to IP restrict access to a website in IIS8,5 (Windows 2012R2)

After a lot of messing about, I found the following worked for me (IIS 8.5.X on win server 2012 R2) Ensure Feature enabled for web.config management In IIS Click on the root server Double click ...
4 votes

What role does "App Pool Identity" play for an Application Pool?

You are seeing two things, that are commonly confused in ASP.NET: "user identity" - Authentication of a user account has nothing to do with the account or identity that actually runs under both IIs ...
  • 141
4 votes
Accepted

IIS 404 redirect is ignored

Whenever a configuration element in my IIS config files doesn't produce the behavior I expect, the first place I look is always the official (and quite comprehensive) IIS.net Configuration Reference ...
4 votes
Accepted

Enable non-admin remote access to IIS Manager

Non-admins can connect to a web site. But only administrators can connect to the server. Reference Here.
  • 441
3 votes
Accepted

How to handle vulnerability searches in IIS?

For Linux servers I manage these attempts using fail2ban so that it will autoban the IPs that attempt to find vulnerabilities on the web server. IIS has some free plugins (Microsoft supported) that do ...
  • 101
3 votes

IIS 8.5 Windows Authentication failing for some users

The fact that the locked out users are all in the same AD group is probably not a coincidence. Those users may not have NTFS permissions to access the application folder. To avoid this problem, I've ...
  • 161
3 votes

SSL binding with no hostname, and centralized certificate store?

In IIS 10 you can have: Name Bindings ---- -------- Default Web Site https *:443:*.bar.com sslFlags=3 https *:443:*.bar.net sslFlags=3 ...

Only top scored, non community-wiki answers of a minimum length are eligible