Search code examples
ssliisssl-certificateiis-10

IIS10 SSL Configuration for Multiple Sites and more than one SSL Cert

I have one scenario where I am working on the IIS Website Configurations for URL Routing. I have added the website and Import the required Certificates on the server.

My scenario is (I have multiple website URLs and two SSL Certs - as below):

qatest1.abc.com

qatest2.abc.com

qatest3.abc.com

Above 3 URLs need to be configured on one SSL Certificate - which is QA Certificate.

Another URL is:

perftest.abc.com

And for this URL there is a separate certificate as PERF (performance) certificate.

This is how the Task is given to me to configure the IIS Settings on MS IIS 10.

Now the Issues which I am facing is:

  1. Not able to configure all the URLs configuration on the same IIS, as per the task given to me I am supposed to configure them all on the same IIS.
  2. Getting a strange message (image attached) and it won't allow me to configure all my above website URLs on the same machine, on the same IIS.

    iis-https-binding-error-message

  3. Also trying to read about SNI (But Not sure about how to make use of SNI in this case).

    iis-https-binding-sni

Need help from IIS Experts who can support me on this activity to complete.

Solution

  • you could check the Server Name Identification by using this you can avoid the certificate prompt.

    This feature offers an easier solution to hosting multiple sites that have a different or individual SSL on a single IP address.

    Each HTTPS binding requires a unique IP/port combination because the Host Header cannot be used to differentiate sites using SSL.This is because the host header is not visible during the SSL handshake.

    Server Name Indication (SNI) allows the server to safely host multiple TLS Certificates for multiple sites, all under a single IP address.