SSL encryption basic authentication

SSL encryption Basic authentication

u Case demand

How to encrypt basic authentication via SSL?

u Knowledge Tips

IIS 7.0 provides a variety of user authentication methods. If basic authentication is enabled, the password transmitted on the network is weakly encrypted and can be easily stolen. Therefore, SSL encryption can be used, so that the security of the user password is guaranteed.

Specific implementation steps are described in the play.

(1) Change the Web site user authentication method to Basic Authentication in IIS, as shown in Figure 5.1.

Figure 5.1 Changing authentication methods

(2) Request a certificate for the Web server, as shown in Figure 5.2.

Figure 5.2 Completion of Certificate Application

(3) Add website binding for Web site, select "https" for type, select the certificate you just applied for SSL Certificates, and click "OK" button, as shown in Figure 5.3.

Figure 5.3 Adding Web site bindings (1)

(4) Delete the http type website binding, keep only the newly added website binding, and then click the "Close" button, as shown in Figure 5.4.

Figure 5.4. Adding Web site bindings (2)

(5) Access the site via https on the client, as shown in Figure 5.5. After a successful login, clicking the button behind the address bar as shown in Figure 5.6 prompts the client that the connection to the Web server is encrypted.

Figure 5.5. Accessing a Web site via https

Figure 5.6 Connection encrypted