Security for a day

After a “friendly discussion” with a development group, I pointed out the minor problem of SharePoint’s Central Administration site running in HTTP and all those usernames and passwords traveling in clear text across the wire. A quick demo with Wireshark got the message across, but they looked blankly at me on how to lock down the site.

*sigh*

After the SSL has been placed on the site run this at the cmd prompt

stsadm -o setadminport -ssl -port 443

Then set the web site to use require SSL.

The  of the steps here, but  remember with IIS 6  1 SSL cert per IP address, unless you have a wild card cert!