Specifications

Using IIS with Equalizer
Equalizer Installation and Administration Guide 183
Components and turn on the check box next to Internet Information Services (IIS); click
Next and follow the wizard’s instructions.
2. Select Control Panel > Administrative Tools > Internet Information Services.
3. For a cluster (server) certificate, navigate to the website for which the CSR is intended. For a
client certificate, navigate to any website or the default. Right click on the website and select
Properties.
4. Select the Directory Security tab and click the Server Certificate button.
5. Select Next, and follow the Certificate Wizard prompts:
a. Select Create a new certificate, and then Next.
b. Select Prepare the request now, but send it later, and then Next.
c. Type a Name for the certificate and select a Bit Length that is a multiple of 8. For most
purposes, a bit length of 1024 is adequate. Longer bit lengths increase security at the
expense of more SSL processing. Select Next.
d. Type in an Organization (e.g., MyCompany, Inc.) and Organizational Unit (e.g.,
Marketing); then select Next.
e. Type in the Common name for the certificate, and then select Next.
For a server certificate, the Common Name provided must be the DNS-resolvable fully
qualified domain name (FQDN) used by the Equalizer cluster. When a client receives the
certificate from the server, the client browser will display a warning if the Common Name
does not match the hostname of the request URI.
For a client certificate, the Common Name in the client’s copy of the certificate is only
compared to the Common Name in the copy of the client certificate on the server, so
Common Name can be any value.
f. Type in a Country/Region, State/province, and City/locality; then select Next.
g. The last step in the wizard is to name and locate the new CSR. The default name and
location will be c:\certreq.txt unless you choose otherwise.
6. Visit the SSL vendor’s website to submit your certificate request.
7. Once the SSL vendor has mailed the new signed certificate back to you, do
one of the
following:
a.
If you are using this certificate with a Layer 4 cluster, copy the new certificate onto the
system on which you generated the request and double-click to install. If this is a server
certificate for a server in a Layer 4 TCP or UDP cluster, make sure you attach it to the
appropriate web site. If this is a client certificate, make sure you place the certificate in the
Personal certificate store.
b. If you are using the certificate with a Layer 7 cluster, export your new SSL certificate with
your private key, so that it can be installed on Equalizer:
A. In IIS, right click on the website for which the certificate was generated and navigate
through Properties > Directory Security > View Certificate > Details.
B. Select Copy to File, then Next.
C. Select Ye s, export the private key; then Next.
D. Select PKCS #12 (.PFX); check Enable strong protection; then Next.
E. Type and confirm the password; then Next.