IIS

How to Setup IIS for SSL Perfect Forward Secrecy and TLS 1.2

by

An often overseen action is to lock down Internet Information Services. You can increases security of SSL connections to your server by disabling insecure SSL2 and SSL3 and all insecure and weak ciphers that a browser may fall-back, too. I recently found a great PowerShell script, which can help implement the current best practices for IIS in a quick way. This PowerShell script setups your Microsoft Internet Information Server 7.5/8.0/8.5/10 (IIS) on Windows 2008R2/2012/2012R2/2016 to support …

Read more

How to Encrypt Password in web.config files

by

This post is a small how to guide, on how to encrypt sensitive information in a web.config and in my specific case username and password for a service account used by the Azure Multi-Factor Authentication (MFA) services, such as MFA User Portal and MFA Mobile App web services. In my scenario, those services had been installed on dedicated servers and since it was decided to use service accounts for communicating with the backend MFA servers. …

Read more

IIS Express 7.5 and WebMatrix Released

by

Microsoft has released IIS Express 7.5 and WebMatrix and made them available as free download. WebMatrix is a complete Web development stack for pragmatic developers. WebMatrix is the IDE which elegantly integrates a Web server (IIS Express), database (SQL Compact) and programming frameworks (ASP.NET and PHP) into a single, integrated experience. IIS Express is a simple and lightweight version of IIS that is optimized for developers. It is free, supports the powerful features of IIS, …

Read more

PHP Manger for IIS 7

by

Ruslan from the IIS team, has released a new module for IIS 7, the PHP Manager for IIS 7, currently in beta. It is an IIS extension for setting up and managing multiple PHP installations on IIS 7 servers. It can be used to: Register PHP with IIS; Run multiple PHP versions side by side; Check PHP runtime configuration and environment (output of phpinfo() function) Configure various PHP settings Enable or disable PHP extensions Remotely …

Read more