Microsoft KB Archive/324013

= HOW TO: Configure IIS To Use Platform for Privacy Preferences (P3P) =

Article ID: 324013

Article Last Modified on 5/23/2007

-

APPLIES TO


 * Microsoft Internet Information Services 5.1
 * Microsoft Internet Information Services 5.0
 * Microsoft Internet Information Server 4.0

-



This article was previously published under Q324013



We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx



IN THIS TASK
SUMMARY
 * Configure P3P Headers on an IIS Web Site
 * Troubleshooting

REFERENCES



SUMMARY
This step-by-step article describes how to configure your Internet Information Services (IIS) Web site to support Platform for Privacy Preferences (P3P). You can view privacy policy information by using Microsoft Internet Explorer 6.0 or later.

NOTE: To follow the steps in this article, you must already have the following:
 * Full privacy policy for the site in an XML file, according to the P3P specification.
 * A policy reference file in XML format with a file name of P3p.xml, according to the P3P specification. This policy reference file must refer to the full privacy policy for your Web site.
 * The compact codes for the privacy policy, to be added as mini headers.

For more information about how to create the full privacy policy, policy reference, and compact codes, visit the following World Wide Web site:

http://www.w3.org/P3P

For more information about full privacy policy, policy reference, and compact codes, visit the following Microsoft Developer Network (MSDN) Web site:

http://msdn2.microsoft.com/en-us/library/ms537341.aspx

NOTE: Based on your privacy policy, the compact codes for your Web site may be different from the example in this article.

back to the top

Configure P3P Headers on an IIS Web Site
 Click Start, point to Programs, click Administrative Tools, and then click Internet Services Manager to open the Internet Services Manager (ISM). Select the Web site on which you want to implement P3P. Right-click the Web site, and then click Properties. In the Web site property sheet, click the HTTP Headers tab. In the Custom HTTP Headers box, click Add. In the Custom Header Name text box, type p3p .</li>  In the Custom Header Value text box, add your compact codes. For example, to have the following mini header for your site P3P: CP=&quot;NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM&quot; type the following in the Custom Header Value text box: CP=&quot;NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM&quot; </li> Click OK two times.</li> Open Windows Explorer, and then select the content folder for the site. For the default Web site in a default installation of IIS, select C:\Inetpub\Wwwroot.</li> Create a new folder and name it W3c.</li> Copy the policy reference file (P3p.xml) to the W3c folder.</li> Copy the full privacy policy file to the designated folder, as coded in the policy reference file.</li></ol>

back to the top

Troubleshooting
To make sure that the privacy report is served by IIS, follow these steps: <ol> Open Internet Explorer 6.0 or later.</li> Locate the site.</li> On the View menu, click Privacy Report.</li> Select your site from the list.</li> Click Summary to view the privacy report. If P3P is configured correctly, you can see the full privacy report. If you receive the following error, P3P configuration was not successful:

Could not find a privacy policy for http://sitename. To view this site's privacy policy, contact the Web site directly.

</li> When you are finished viewing the report, click OK, and then click Close.</li></ol>

back to the top

Additional query words: P3P IIS IIS4 IIS5 PASSPORT

Keywords: kbhowto kbhowtomaster KB324013

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.