This section contains instructions for setting up access to a secure website upon presentation of a token.
To configure it, you need a computer with the Windows 2019 Server Rus operating system installed, Rutoken drivers and a website published in IIS for which hardware authentication will be configured. The OS must be configured as a web server. The Certification services must have been installed in the system.
Certificates of the User with a smart card or Login with a smart card type must be issued to users.
All the actions described below are performed with system administrator rights.
For this example, the Outlook Web Access web directory will be used for the site default web site.
The settings will be carried out with the rights of the Admin account.
To configure website security settings:
- Open the Control panel.
- Enter the word "administration" in the search box.
- Double-click on the name of the Administration item.
- Double-click on the snap-in name IIS Service Manager.
- In the list called Connections click on the name of the node to be configured.
- Double-click on the name of the setting Authentication.
- If basic authentication is disabled, then enable it (click on the line Basic authentication and click on the link Enable).
- Right-click on the Normal Authentication line and select Change...
- Specify the name of the domain where the web server is located.
- Click on the OK button.
- Right-click on the name of the node for which the configuration will be performed. Select the Change the binding... item
- In the window called Binding of the site click on the Add... button.
- In the drop-down list called Type, select https.
- In the drop-down list called SSL certificate, select the certificate to be used in web server authentication. Click on the OK button.
- Check the selected parameters and close the window Binding of the site.
- In the right part of the window, double-click on the name of the setting SSL parameters.
- In the SSL parameters section check the box of SSL requirements and set the switch to Require.
- In the Actions section click on the link Apply.
This completes the web server security setup. Next, you need to set up the connection to a secure website on the client computer.