How to Enable SSL on the Web Servers

For the latest version of Commerce Server 2007 Help, see the Microsoft Web site.

In an e-commerce site, you process sensitive information, such as customer credit card numbers. This data must be encrypted and transmitted over a channel that is secured. For implementing secure data transfer, you use Secure Sockets Layer (SSL). SSL is a scheme for protocols such as HTTP (named HTTPS when secure), File Transfer Protocol (FTP), and Network News Transfer Protocol (NNTP). When you use SSL to transmit data:

  • The data is encrypted.

  • An encrypted channel is established between the source and destination servers.

  • Server authentication is enabled.

    Note

    You only need to request a certificate once, but you need to import that certificate to each of your Web servers. You must also enable the imported certificate for each Web server.

To implement this functionality, you need to acquire a digital certificate and install it on your server or servers. You can apply to one of the certification authorities for a digital certificate.

To configure your deployment for secure transactions, you enable HTTPS and Secure Sockets Layer (SSL) certificates in the Commerce Server Manager.

To enable SSL on a Commerce Server site

  1. In Internet Services Manager, use the Web Server Certificate Wizard to install and configure a server certificate on your Web server. For instructions, see https://go.microsoft.com/fwlink/?LinkId=6954.

  2. In Commerce Server Manager, expand Commerce Sites, and then click the site that you want to administer.

  3. Expand Applications, right-click the applications that you want to configure, and then click Properties.

  4. In the <application> Properties dialog box, on the General tab, select Enable HTTPS.

  5. On the Web Servers tab, click Synchronize Values to copy the SSL port property from Internet Information Services (IIS) to the Commerce Server Administration database.

    The default value for the SSL port is 443. If you have a value other than 443 here, you must type that value in the Secure host name text box on the General tab (for example, www.microsoft.com:441).

    Note

    After you change a property in Commerce Server Manager, you must restart all services that use those values. For more information, see How to Restart Commerce Server Services.

See Also

Other Resources

Managing Commerce Sites and Applications

Securing the Deployment