Creating IIS7 web application using PowerShell with Require SSL set to "Require"

Question

I'm creating an IIS web site using PowerShell's New-WebSite cmdlet, and within that a web application using New-WebApplication.

The SSL settings for the web application need to be set to Require SSL; Require as shown below.

IIS SSL Settings

For consistency, I would like to do this using only PowerShell cmdlets.

The Require SSL setting is easy; you just add the -Ssl parameter to New-Website.

However, the only way we've found to set the Require option is using Appcmd.exe:

& $env:SystemRoot\System32\inetsrv\Appcmd.exe `
    set config "$WebSiteName/$VirtualDirName" `
    /section:access `
    /sslFlags:"SslRequireCert" `
    /commit:APPHOST

Is there a PowerShell alternative to this?

score 6 · Accepted Answer · edited Mar 18 '13 at 11:47

6

I had to add ssl to the value:

Set-WebConfiguration -Location "$WebSiteName/$WebApplicationName" -Filter 'system.webserver/security/access' -Value "Ssl, SslRequireCert"

edited Mar 18 '13 at 11:47

Abu Romaïssae

3,841
5
37
59

answered Mar 18 '13 at 11:23

user2182089

76
1

The other options did nothing (including the -Ssl for new-website flag) - this worked fine (IIS 7.5, Windows Server 2008R2). – geographika Nov 13 '13 at 15:51
What is the -Value if you want to either ignore or accept SSL? – Paul Apr 09 '19 at 13:44

score 3 · Answer 2 · answered Feb 14 '13 at 16:29

3

Solution found, using Set-WebConfiguration:

Set-WebConfiguration -Location "$WebSiteName/$WebApplicationName" `
    -Filter 'system.webserver/security/access' `
    -Value "SslRequireCert"

answered Feb 14 '13 at 16:29

Richard Ev

52,939
59
191
278

4

Has anyone ever received this error while running the above command: There is no configuration defined for object at path IIS:\SslBindings. – B Johnson Aug 08 '13 at 17:49
I had the same error. Answer by arcain worked for me, but I had to remove <-name "sslflags"> part of it – MikhailSP Mar 06 '20 at 14:24

score 3 · Answer 3 · answered Mar 26 '14 at 07:00

3

I used this method:

Set-WebConfigurationProperty -PSPath "machine/webroot/apphost" `
     -location "$mySiteName" -filter "system.webserver/security/access" `
     -name "sslflags" -value "Ssl,SslNegotiateCert,SslRequireCert"

answered Mar 26 '14 at 07:00

arcain

14,920
6
55
75

Avner · Answer 4 · 2016-06-23T01:41:09.990

3

If you get the error "There is no configuration defined for object at path IIS:\SslBindings" you need to set the PsPath parameter

-PSPath IIS:\Sites

edited Jun 23 '16 at 01:41

answered Apr 10 '14 at 16:05

Avner

4,286
2
35
42

Creating IIS7 web application using PowerShell with Require SSL set to "Require"

4 Answers4