Microsoft KB Archive/225305

From BetaArchive Wiki
Knowledge Base


Cannot Browse the Internet or Use the SBS Console If SSL Is Enabled for All Folders in Default Web Site

Article ID: 225305

Article Last Modified on 11/21/2003



APPLIES TO

  • Microsoft BackOffice Small Business Server 4.5
  • Microsoft Proxy Server 2.0 Standard Edition



This article was previously published under Q225305

SYMPTOMS

When you attempt to connect to an Internet Web site, you may receive the following error message:

HTTP Error 403

403.4 Forbidden: SSL required

This error indicates that the page you are trying to access is secured with Secure Sockets Layer (SSL). In order to view it, you need to enable SSL by typing "https://" at the beginning of the address you are attempting to reach.

Please contact the Web server's administrator if the problem persists.

If the Proxy server is configured to automatically dial the Internet service provider (ISP), it does not attempt to dial when an Internet connection is requested.

Additionally, this error message may appear when you try to start the SBS console.

CAUSE

This behavior can occur if the Scripts virtual directory on the default Web site has been configured to use Secure Socket Layer (SSL). This prevents the client from connecting to the Internet.

Configuring the Admin and Help virtual directories on the default Web site to use SSL prevents the SBS console from starting.

RESOLUTION

If you must configure the default Web site to use SSL, exclude the Scripts, Admin, and Help virtual directories from using SSL.

For additional information about how to install Certificate Server and configure SSL, click the article number below to view the article in the Microsoft Knowledge Base:

218445 How to Configure Certificate Server for Use with SSL on IIS


STATUS

Microsoft has confirmed that this is a problem in Internet Information Server 4.0.

MORE INFORMATION

It is a good idea not to alter the default Web site by adding SSL, but rather to create virtual Web sites that use SSL instead. The Web Proxy service is completely dependent on the default Web site, so changes (such as adding SSL, changing the default name, changing the IP address from all unassigned to a specific IP address, and so on) can cause instability in the Proxy service and lead to a number of problems.


Additional query words: smallbiz

Keywords: kbbug kbnofix kbenv KB225305