Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an application developed using asp.net 2.0 and the goal is to make the webpage secure by using the https protocol.

I have searched all over the internet for some insight on how to accomplish this, and I have read about certificates, and so on, but couldn't quite figure this out yet.

So my question is, how can I accomplish this?

Explain this to me as if I didn't know anything about https.

I am using IIS 6.0 and ASP.NET 2.0.

share|improve this question

migrated from stackoverflow.com May 30 '11 at 15:09

This question came from our site for professional and enthusiast programmers.

To me this question sounds like: I don't want to invest time, please do it for me. If you really do find nothing regarding HTTPS, see this Wikipedia entry. – Uwe Keim May 30 '11 at 9:34
fits better on serverfault.com – cularis May 30 '11 at 9:35
Don't know whether you host your website on your own server or not, but if you're using a hosting services out there, they should be able to help you install everything. – Arief Iman Santoso May 30 '11 at 9:37

Http over SSL - To accomplish this you will need a Signed Certificate. For a development purpose you can use Self Signed Certificate.

Here is an article on how to achieve this:


Once you have the certificate ready, you will have to map it to the website and you should be good to go.

On a Production System, if you are using a Shared Hosting, generally the Shared Hosting providers give you a folder location or ability to map folders for Https from Control Panel. For a VPN/Dedicated Server, you will get/purchase the certificate from a Signing Authority and do the same step of mapping it to the IIS server.

Hope this helps.

share|improve this answer
The objective of the application is to be deployed on various servers when it's finished. Does this mean that i will need to have more than one certificate? – seth May 30 '11 at 9:44
Then you are reffering a load balanced / Web Farm environment. Here are the instruction for how to set the environment up.. Also remember to mention this while getting the signed certificate from the certificate authority : support.microsoft.com/kb/313299 – sajoshi May 30 '11 at 9:47
What i quite don't understand is what the certificate does exactly. – seth May 30 '11 at 10:34
What the certificate does is say that this server with this name, such as example.com is the server that was originally given the certificate. It's possible to fool a web browser that your fake server is example.com, but it's not possible for you to create a fake certificate. – paulmorriss May 31 '11 at 8:28

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.