Overview

This article describes the process to configure IIS (Internet Information Services) to use a secure connection by configuring HTTPS. 

Solution

Steps in this article are provided on a best-effort basis and configuring webservers (IIS or any other webserver) is out of scope for GFI Archiver Support. If you need further assistance with configuring your webservers, please contact your service provider or system administrator as applicable.

Based on the IIS version installed, follow the steps mentioned below to configure HTTPS. Then apply the settings mentioned in the General section of the process to complete the configuration:

IIS 7

1. Ensure that you have configured a Server Certificate which will be used for HTTPs communication. You can configure this from the following:
   1. Open Internet Information Services (IIS) Manager.
   2. Click the Server.
   3. In the left pane, under IIS click Server Certificates.
   4. Create a new certificate, or attach to an existing certificate.
2. Ensure that there is an HTTPs binding for the web server that hosts the GFI Archiver website:
   1. Open Internet Information Services (IIS) Manager.
   2. Expand the Server > Sites.
   3. Right-click the Default Web Site (which is hosting the GFI Archiver website by default) and select Edit Bindings.
   4. Ensure that the https binding is created. If not, click the Add... button and add a new https type binding, then click OK to create the binding.
3. Enforce SSL communication on the GFI Archiver virtual directory:
   1. Open Internet Information Services (IIS) Manager.
   2. Expand the Server > Sites > Default Web Site.
   3. Click the Archiver node.
   4. In the left pane, click SSL Settings under IIS.
   5. Select the options Require SSL and Require 128-bit SSL.

IIS 6

1. Open the Internet Information Services (IIS) Manager.
2. Browse to Websites.
3. Right click the website used by GFI Archiver (by default, the Default Web Site is used) and select Properties.
4. From the Directory Security tab select Server Certificate.
5. Follow the IIS certificate wizard to create a new certificate, or attach to an existing certificate.
6. Click OK to close the Default Web Site properties.
7. Under Default Web Site select the Archiver virtual directory.
8. Right-click and select Properties.
9. Select the Directory Security tab and in the Secure Communications section, click Edit.
10. Check Require secure channel (SSL) and Require 128-bit encryption.
11. Ensure that in the Client Certificates section, Ignore client certificates is selected.
12. Click OK to close the Secure Communications window.
13. Click OK to close the GFI Archiver Virtual Directory Properties.

General

1. Run regedit.exe.
2. Edit the following registry entry to reflect the URL change from HTTP to HTTPS:
   • GFI Archiver 2015: HKEY_LOCAL_MACHINE\SOFTWARE\GFI\MAR11\WebsiteAddress
   • GFI MailArchiver 2014: HKEY_LOCAL_MACHINE\SOFTWARE\GFI\MAR10\WebsiteAddress
   • GFI MailArchiver 2013:
     • 64bit OS: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\GFI\MAR9\WebsiteAddress
     • 32bit OS: HKEY_LOCAL_MACHINE\SOFTWARE\GFI\MAR9\WebsiteAddress
3. Stop all GFI Archiver services.
4. Start all GFI Archiver services.

Notes: Ensure that the HTTP SSL service is running. By default, the Startup Type for this service is set to Manual. From the Properties of the services, change the Startup Type to Automatic and Start the service.