IIS Server Security - HTTPS working (I think) but Security lock not showing in IE

Author

HTTPS working (I think) but Security lock not showing in IE

Kirk Graves

2004-11-19, 5:51 pm

I have an IIS 6 Server that I have just inherited (the system admin just
left the company). I have a directory that needs to be SSL protected. I
have the Certificate installed (it was done before I took over), and I can
require the directory only be accessed through SSL. My problem is that one
of the files in the directory does not show the lock in IE after it is
loaded. The file starts off showing the lock, but by the time the file is
loaded, the lock is gone. all other files in the directory are working
correctly, it is only this one file that is giving me grief.

Does anyone have some time for developer turned IIS Admin (against his
will).

Thanks!

Kirk

HTTP working (I think) but Security lock not showing in IE

Ganesh Anekar [MSFT]

2004-11-22, 5:50 pm

Hello Kirk,

You will need to make sure "require SSL" is enabled on that file and as well
as all files under that directory through IIS snap-in.

Basically the page you are trying to load if it contains non-secure items
like images then Lock won't show up in IE.

Hope this helps.

Thanks,
Ganesh Anekar
Microsoft Developer Support
Internet Information Server
****************************************
*****************************
account name for newsgroup participation only.<<

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.

© 2004 Microsoft Corporation. All rights reserved.
****************************************
*****************************
"Kirk Graves" <krgitsoftware@yahoo.com> wrote in message
news:%23bK2atpzEHA.1404@TK2MSFTNGP11.phx.gbl...[vbcol=seagreen]
>I have an IIS 6 Server that I have just inherited (the system admin just
> left the company). I have a directory that needs to be SSL protected. I
> have the Certificate installed (it was done before I took over), and I can
> require the directory only be accessed through SSL. My problem is that
> one
> of the files in the directory does not show the lock in IE after it is
> loaded. The file starts off showing the lock, but by the time the file is
> loaded, the lock is gone. all other files in the directory are working
> correctly, it is only this one file that is giving me grief.
>
> Does anyone have some time for developer turned IIS Admin (against his
> will).
>
> Thanks!
>
> Kirk
>
> HTTP working (I think) but Security lock not showing in IE
>
>
>

Ken Schaefer

2004-11-23, 8:27 am

In your HTML file, you may have references to other files, eg images <img
src="/images/someImage.gif">, CSS files, external javascript (.js) files
etc. None of these can have http:// references. They must all be https:// or
they must not include a protocol at all. Only if all items are downloaded
via https does the browser show the lock icon.

Cheers
Ken

"Kirk Graves" <krgitsoftware@yahoo.com> wrote in message
news:%23bK2atpzEHA.1404@TK2MSFTNGP11.phx.gbl...
>I have an IIS 6 Server that I have just inherited (the system admin just
> left the company). I have a directory that needs to be SSL protected. I
> have the Certificate installed (it was done before I took over), and I can
> require the directory only be accessed through SSL. My problem is that
> one
> of the files in the directory does not show the lock in IE after it is
> loaded. The file starts off showing the lock, but by the time the file is
> loaded, the lock is gone. all other files in the directory are working
> correctly, it is only this one file that is giving me grief.
>
> Does anyone have some time for developer turned IIS Admin (against his
> will).
>
> Thanks!
>
> Kirk
>
> HTTP working (I think) but Security lock not showing in IE
>
>
>