How to make the IIS use the existing certificate?

[Codename K]

Hello,

When the Internet Information Service (IIS) is set up by the installer, it seems to create its own certificate in the Server Certificate section in the Internet Information Service (IIS) Manager. Can this be changed to use an already existing certificate on the IIS server?

[Eusebiu]

Hi,

A server certificate is not installed automatically by the package unless you specify one in the "SSL Bindings" tab from the "IIS" page of your project. However, in that tab you can also specify an existing certificate to be used by writing in its thumbprint.

Best regards,
Eusebiu

[Codename K]

Hello,

Thank you for the information.

[Eusebiu]

My pleasure.

Best regards,
Eusebiu

[Codename K]

Hello,

When I run the installer with Internet Information Service (IIS), I get this error message in Windows Server 2022:

https://drive.google.com/file/d/1IQB2CG ... sp=sharing

But, it is working fine in Windows Server 2016 and 2019.

[Codename K]

Hello,

Is there a way to enable Disable TLS 1.3 over TCP from the Bindings using IIS settings in Advanced Installer? See this image, which shows where the Bindings are by green rectangle:

https://drive.google.com/file/d/1JWhqGT ... sp=sharing

[Eusebiu]

Hi,

When I run the installer with Internet Information Service (IIS), I get this error message in Windows Server 2022:

https://drive.google.com/file/d/1IQB2CG ... sp=sharing

But, it is working fine in Windows Server 2016 and 2019.

I'm not sure why it fails on Windows Server 2022. Can you manually install that certificate from the IIS Manager?

Is there a way to enable Disable TLS 1.3 over TCP from the Bindings using IIS settings in Advanced Installer? See this image, which shows where the Bindings are by green rectangle:

https://drive.google.com/file/d/1JWhqGT ... sp=sharing

Yes, in order to achieve this, you need to add that site binding in the "Binding/SSL" tab of your website and also set a SSL certificate for it:

SSL Binding.png (50.83 KiB) Viewed 79138 times

After that, you need to go in the "Custom Properties" tab, add the site binding again and set value "32" for the "sslFlags" attribute which will enable the "Disable TLS 1.3 over TCP" option for that binding:

Custom Properties.png (49.67 KiB) Viewed 79138 times

Let me know if this helepd.

Best regards,
Eusebiu

[Codename K]

Hello,

After that, you need to go in the "Custom Properties" tab, add the site binding again and set value "32" for the "sslFlags" attribute which will enable the "Disable TLS 1.3 over TCP" option for that binding:

I tried this method. However, I get this error message,

https://drive.google.com/file/d/1IQB2CG ... LH7RX/view

However, if I check the All Unassigned, and remove the Custom Properties, then installs without issues.

My question is: how to set the Custom Properties while All Unassigned is checked.

[Eusebiu]

Hi,

This error may appear if the settings from the "Binding/SSL" tab does not match the ones from the "Custom Properties" tab. To set the custom property when "All Unassigned" option is set, you just need to remove the IP address from the value of the "bindingInformation" entry (e.g. :8088:).

If you cannot get this to work, please send me your project to support at advancedinstaller dot com so I can investigate it.

Best regards,
Eusebiu

[Codename K]

Hello,

If you cannot get this to work, please send me your project to support at advancedinstaller dot com so I can investigate it.

I have sent it.

[Eusebiu]

Hi,

I've looked over your project and I noticed that you use the "https_port" property for the port number in the "Bindings/SSL" tab. Please note that the binding from that tab and the one from the "Custom Properties" tab must be identical, otherwise it will not work.

Therefore, you need to use a port value or the same port property for the bindings from both tabs. If you want to use the "https_port" property, you need to configure the custom property as shown in the image below:

Binding Port Property.png (14.04 KiB) Viewed 77152 times

Let me know if this helped.

Best regards,
Eusebiu

[Codename K]

Hello,

Therefore, you need to use a port value or the same port property for the bindings from both tabs. If you want to use the "https_port" property, you need to configure the custom property as shown in the image below:

This worked perfectly. Thank you.

[Eusebiu]

You're welcome. I'm glad it worked.

Best regards,
Eusebiu

[Codename K]

Hello,

How to create a self-signed certificate during the installation with Internet Information Service (IIS) to be used with the created website?

[Catalin]

Hello K,

In order to achieve that, you can use the "Generate and install self signed certificate" custom action.

Best regards,
Catalin