24 votes

Multiple ssl certificates with one ip and same port but different host headers (IIS 8)

There is a simple way to do, tick the "Require Server Name Indication" in "Bindings...". Reference: https://stackoverflow.com/a/27791857/3260008
Amos's user avatar
  • 341
13 votes

Disable TLS 1.2 stops RST packets

Are you 100% sure he is not testing with a higher or lower version of TLS, packet resets normally are attributed to the application not knowing what to do with it.
Donna Delour's user avatar
10 votes

Missing "Server Certificates" icon in IIS8

To clarify because there seems to be some confusion here, you need to click on the IIS server - not the site. Add your certificate. Then click on the site that will use it and bind the certificate ...
logix.ca's user avatar
  • 116
7 votes

IPv6 website not working in IIS 8

I can ping6 the IP address noted above from my office. PING 2001:4ba0:cafe:c54::1(2001:4ba0:cafe:c54::1) 56 data bytes 64 bytes from 2001:4ba0:cafe:c54::1: icmp_seq=1 ttl=115 time=41.2 ms 64 ...
user9517's user avatar
  • 116k
5 votes

IIS 8 - Default SSL Site Breaks SNI

I think if you change the IP address for the somedomain.com binding to "All unassigned" rather than, it will stop getting in the way of your SNI sites [surprisingly].
franzo's user avatar
  • 223
5 votes

iis 8 - 403 access is denied

Here's how I got my IIS fixed after getting random 403's all over.
paul-2011's user avatar
  • 165
5 votes

How to log authentication failures on IIS

Found out. The login failures are logged into eventlog system. They can be retrived by searching for event id 4625 on event viewer.
Miguel's user avatar
  • 571
5 votes

Hide Physical Path in IIS HTTP Error

I had to adjust the tag: <httpErrors errorMode="DetailedLocalOnly" /> This is inside the "system.webserver" tag. Mine was previously set to "Detailed" https://docs.microsoft.com/en-us/iis/...
archangel76's user avatar
5 votes

How to Remove Microsoft-HTTPAPI/2.0 Header on IIS 8 and 10

If the response's Server header returns "Microsoft-HttpApi/2.0", it means that the HTTP.sys is being called instead of IIS. Exploits and port scans use this as a means of fingerprinting an IIS server ...
Jeffry McGee's user avatar
5 votes

IIS IP Address and Domain Restrictions with Proxy Mode Enabled denying allowed x-forwarded-for

Both your IP and your x-forwarded-for IP(s) must be allowed entries for the request to be allowed. With "Proxy Mode" on, the server first checks that the presented IP (the proxy's IP) is ...
user6604437's user avatar
4 votes

Trailing dots in url result in empty 404 page on IIS

Adding this attribute in the httpRuntime section may help you: <configuration> <system.web> <httpRuntime ... relaxedUrlToFileSystemMapping="true" .../> </system.web> &...
Mohi's user avatar
  • 141
4 votes

What role does "App Pool Identity" play for an Application Pool?

You are seeing two things, that are commonly confused in ASP.NET: "user identity" - Authentication of a user account has nothing to do with the account or identity that actually runs under both IIs ...
Stokely's user avatar
  • 141
3 votes

Set a Custom Identity for Application Pool in IIS 8 doesn't work. Value does not fall within the expected range

I had this issue with a new IIS 10 deployment. Our network team copied over the applicationhost.config file from the older servers and this caused it. In IIS 10 there are two new settings that encrypt ...
user441058's user avatar
3 votes

Is it possible to change the SSL binding order in IIS?

The administration tool does not behave consistently enough to allow you to order the bindings. The reason for this, I think, is that your bindings are supposed to be unambiguous enough to not ...
Dave Tinney's user avatar
3 votes

MS Webdeploy V3 encryptPassword correct usage

Well, I just learned why you need a password. (For those who don't know how, I've shown an example command line at the bottom.) According to one of the examples on this page, the encryptPassword ...
jpaugh's user avatar
  • 231
3 votes

ASP Redirect Base URL Being Rewritten by IIS

Found the answer and wanted to post here in case someone else runs across the issue. Per https://stackoverflow.com/a/23600821/132528: Could Application Request Routing be involved? Look at IIS -> ...
JasCav's user avatar
  • 233
3 votes

IPv6 website not working in IIS 8

Per your comments and other peoples tests it seems that the most likely explanation is that your client systems simply don't have access to the IPv6 internet. Iain's answer does a great job of dealing ...
Peter Green's user avatar
  • 4,296
3 votes

Nexus Repository OSS reverse proxy

In a reverse proxy setup, Nexus looks for the presence of various X-Forwarded-* HTTP headers in order to determine its base URL. As long as you set these headers correctly, it should produce the ...
Mike Paxton's user avatar
3 votes

Can you run a DNS on the same machine as your webserver? If so, how do you set it up?

Yes you can run DNS on you machine, but most registrars will require at least two IPs for setting up you own nameservers, and it would be wiser to use multiple external DNS servers for redundancy and ...
ralz's user avatar
  • 2,781
2 votes

Setting up default SSL site on IIS8

ts;dr: Ignore the warning. It's 2022 and I was surprised to see this warning in a recently stood up Windows 2019 Server running IIS 10. Based on all major browsers supporting SNI for over 10 years, I ...
TTT's user avatar
  • 746
2 votes

Installing SSL on a Windows Server 2012 with IIS 8.0

Run IIS Manager as administrator! Always - when doing SSL changes! Also when GoDaddy automatically updates a certificate they use the same key you originally had - so you don't need to rekey for the ...
Simon's user avatar
  • 1,380
2 votes

Unable to set password in IIS 8 for Domain User as ApplicationPool Identity

You can grab the private key from another server and simply import it in to this server by first exporting a key from another IIS server that works: C:\Windows\Microsoft.NET\Framework64\v4.0.30319>...
Tony Trus's user avatar
2 votes

Permissions issue on C:\Windows\System32\inetserv

The default permissions for system32\inetsrv on Server 2012 are: NT SERVICE\TrustedInstaller:(F) NT SERVICE\TrustedInstaller:(CI)(IO)(F) NT AUTHORITY\SYSTEM:(M) NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F) ...
Peter Hahndorf's user avatar
2 votes

How can I warm up my asp.net mvc webapp after an app pool recycle?

From my experience, AlwaysRunning and Preload enabled doesn't get much speed up. The most wait time goes on dynamic compilation (which can be fixed with aspx precompile) and loading assemblies into ...
zmikic's user avatar
  • 21
2 votes

IIS 8 FTP - how do I find out failed user authentication (and client IP) in the log?

I hope i understand your question correctly. You can customize your FTP logging by selecting W3C Fields. First of all make sure that you habe FTP Extensibility enabled either by searching it in your ...
SimonS's user avatar
  • 787
2 votes

cannot get directory list via ftp using windows 2012 r2, iis-8

Just posting to say I had the same experience. IISreset didn't cut it on server 2016. I made all the changes in the IIS FTP site config for range and public IP, setup firewall to NAT those ports, etc. ...
user427984's user avatar
2 votes

IIS8 Centralized Certificates Not Recognizing Certs ("The specified private key password is not correct.")

In regards to the issue you are seeing where it responds with the file system could not find the file specified, we had a similar issue. Our certificate manager always uses Linux/OpenSSL to create ...
SmithPlatts's user avatar
2 votes

IIS8 PHP7 multiple php websites

Ran into same problem on a PHP7.1 / IIS8.5 / Win8.1 dev setup. With multiple websites only one would work. Accessing any of the others or even just the default phpinfo view would throw HTTP Error 500....
asdf's user avatar
  • 21
2 votes

Multiple ssl certificates with one ip and same port but different host headers (IIS 8)

I found the solution - using ssFlags = 1 https://www.iis.net/configreference/system.applicationhost/sites/site/bindings/binding
Omri's user avatar
  • 371
2 votes

No FTP login prompt windows 2012

The issue I found was that a section was missing from the application.config file stored at C:\Windows\System32\inetsrv\config\ After adding the line in, the FTP server started prompting for logins. ...
SteveBradford's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible