Security: An SSL error occurred. Monitor

  • ID:  Security__An_SSL_error_occurred__1_7_Rule.Monitor
  • Description:   
  • Target:  IIS 2003 SMTP Server
  • Enabled:  On Essential Monitoring

Operational States

Name State Description
Manual Reset Success  
Config Error Warning  

Alert Details

Monitor State Message Priority Severity Auto Resolution
Config Error (Warning) Security An SSL error occurred Low Warning Yes

Run As Profiles

Name
Default

Monitor Knowledgebase

Summary

An error occurred with an SSL connection.

Causes

An error with the Secure Sockets Layer (SSL) certificates for Internet Information Server (IIS).

Resolutions

To resolve this issue execute the following steps:

Load Internet Information Services Manager snap-in which can be found in the Computer Management console. The following task will start the Computer Management console:

Start Computer Management Console

Expand Server_name, where Server_name is the name of the server, and then expand Web Sites.

Use one of the following methods (as appropriate to your situation), and then click Properties:

  • To configure authentication for all Web content that is hosted on the IIS server, right-click Web Sites.

  • To configure authentication for an individual Web site, right-click the Web site that you want.

  • To configure authentication for a virtual directory or a physical directory in a Web site, click the Web site that you want, and then right-click the directory that you want, such as _vti_pvt.

  • To configure authentication for an individual page or file in a Web site, click the Web site that you want, click the folder that contains the file or the page that you want, and then right-click the file or the page that you want.

In the ItemName Properties dialog box (where ItemName is the name of the item that you selected), click the Directory Security or the File Security tab (as appropriate).

Under Anonymous access and authentication control, click Edit.

Click to select the Anonymous access check box to turn on anonymous access. To turn off anonymous access, click to clear this check box.

Note: If you turn off anonymous access, you must configure some other form of authenticated access.

To change the account that is used for anonymous access to this resource, click Browse, click the user account that you want to use, and then click OK.

Under Authenticated access, click to select the Windows Integrated authentication check box if you want to use integrated Windows authentication.

Note: This authentication method was formerly known as Microsoft Windows NT Challenge/Response or NT LAN Manager (NTLM).

Click to select the Digest authentication for Windows domain servers check box if you want to use digest authentication. When you receive the following message, click Yes:

Digest authentication only works with Active Directory domain accounts. For more information about configuring Active Directory domain accounts to allow digest authentication, click Help.

Are you sure you wish to continue?Type the realm name in the Realm box.

Note: You must configure user accounts with the Store password using reversible encryption account option selected.

Click to select the Basic authentication (password is sent in clear text) check box if you want to use basic authentication. When you receive the following message, click Yes:

The authentication option you have selected results in passwords being transmitted over the network without data encryption. Someone attempting to compromise your system security could use a protocol analyzer to examine user passwords during the authentication process. For more detail on user authentication, consult the online help. This warning does not apply to HTTPS (or SSL) connections.

Are you sure you want to continue?

To specify a domain with which to authenticate users who are using basic authentication, type the domain that you want in the Default domain box.

You also have the option to enter a value in the Realm box at this point.

Click to select the .NET Passport authentication check box if you want to use .NET Passport authentication.

Note: When you select this option, the other authentication methods are unavailable.

Click OK, and then in the Item Name Properties dialog box, click OK. If the Inheritance Overrides dialog box opens, follow these steps:

1. Click Select All to apply the new authentication settings to all of the files or the folders that are located in the item that you changed.

2. Click OK.

Quit IIS Manager or close the IIS snap-in.

External References

For more information, see the following Microsoft Web site:

Obtaining a Client Certificate

http://www.microsoft.com/windows2000/en/advanced/iis/default.asp?url=/WINDOWS2000/en/advanced/iis/htm/core/iiclisc.htm

See Also for Windows Internet Information Services Management Pack


Downloads for Windows Internet Information Services Management Pack

AZURE OPTIMIZATION ASSESSMENT GET STARTED
MIGRATION TO AZURE GET STARTED
SYSTEM CENTER MIGRATION TO AZURE GET STARTED
MIGRATION TO AZURE FOR SQL AND WINDOWS 2008 GET STARTED