Share via

SSL Diagnostics Tool for IIS 7

  • Article

The SSL Diagnostics tool is a very useful tool for troubleshooting SSL issues.  It generates a detailed report of SSL settings for all the websites on an IIS server which helps in quickly identifying SSL issues.

But the tool was built for IIS 5 and 6, there is no version available which is compatible with IIS 7. The SSL Diagnostics tool does succeed in generating a report on IIS 7 if the IIS 6.0 Metabase Compatibility feature is installed.

To help troubleshoot SSL issues on IIS 7 I have written a tool which works in a similar fashion. It scans all the websites and FTPS sites configured on the server and generates a report which can help in identifying SSL issues.

ssldiag

If any certificate has issues you will get a report as follows.

ssldiag-error

FEATURES

Generate Report – Scans all websites and FTPS sites on the local server. If a certificate association is found it will list details of the certificate. It also performs a certificate validation on the certificate. For SSL bindings it also attempts to check if a TCP connection can be established.

Simulate SSL Web Request – Right clicking on a https binding gives you this option. It generates a SSL Web request based on the selected binding and displays the response received.

Verify Store – Basically is the output of certutil –verifyStore MY. Useful in identifying certain issues with certificates.

INSTALLATION & USAGE

Attached SSLDiag.zip contains SSLDiag.exe.
You do not have to install this but just run the exe. (“Run as Administrator”)
You do not need the IIS 6.0 Metabase Compatibility feature to be installed.
You can also save the report generated for your notes or latter analysis.
Requires .NET 2.0.

Hope it helps in reducing your troubleshooting time on SSL issues.

Bookmark and Share

SSLDiag.zip

Comments

  • Anonymous
    October 01, 2009
    This Is New Comments To Download This Tools

  • Anonymous
    October 02, 2009
    I'm having an issue with transport security and this might help.  Thanks

  • Anonymous
    October 08, 2009
    Great tool and so on-time for me. I can use it for for www.****************.com and www.*****************. Thanks.

  • Anonymous
    September 12, 2010
    Great tool. It helped me with something I was trying to do. I have been trying to generate a report in all sites bindings inside our web server. This will help me with it, even if it does not exactly does that.

  • Anonymous
    May 19, 2013
    I think the title is contrary with the articles here. The tools was built to run in IIS 5 & 6, but the title mentioned for IIS 7

  • Anonymous
    May 29, 2014
    The comment has been removed

  • Anonymous
    July 01, 2014
    Does it verify the same over internet or not ? what to do if the Server Certificate Validation Failed ?

  • Anonymous
    April 23, 2015
    Where is the Key Container and the Unique container name values pulled from ? We are having issues with our client certificates on one of our servers.  The key container has some {GUID}. the Unique container name is missing altogether. That's the only difference we can see between another client cert on another server. Thanks.

  • Anonymous
    October 12, 2015
    how can i troubleshoot my soundcard. it doesnt work