Changes to IIS for stateless machine for Windows Azure RSS

• • Reply
  

  richtobey

  3 Posts

  Changes to IIS for stateless machine for Windows Azure

  May 28, 2012 02:54 AM|LINK

  I'm running a WCF Service in a webrole on Azure and have an exe which I launch during the startup task using elevated privileges. I need to be able to set IIS configuration for two additional items as follows: 1) Set a virtual directory's ssl settings (sslflag) to SslNegotiateCert and, 2) Set the restriction level for ISAPI and CGI restrictions for the web server to Allowed for "ASP.NET v4.0.30319" (d:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll). I would like to use ServerManager from Microsoft.Web.Administration and I do not want to use AppCmd. On item 2, I started to look here but it's a little over my head. (http://www.iis.net/ConfigReference/system.webServer/security/isapiCgiRestriction/add) Your help would be greatly appreciated. Thanks. Rich
• • Reply
  

  richtobey

  3 Posts

  Re: Changes to IIS for stateless machine for Windows Azure

  May 28, 2012 02:16 PM|LINK

  I solved item 2: using (ServerManager serverManager = new ServerManager()) { Configuration config = serverManager.GetApplicationHostConfiguration(); ConfigurationSection isapiCgiRestrictionSection = config.GetSection("system.webServer/security/isapiCgiRestriction"); ConfigurationElementCollection isapiCgiRestrictionCollection = isapiCgiRestrictionSection.GetCollection(); foreach (ConfigurationElement restriction in isapiCgiRestrictionCollection) { ConfigurationAttribute path = restriction.GetAttribute("path"); if (path.Value.ToString() == "D:\\windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_isapi.dll") { restriction.SetAttributeValue("allowed", true); serverManager.CommitChanges(); } } }
  • Marked as answer by Lloydz on May 30, 2012 08:41 AM
• • Reply
  

  richtobey

  3 Posts

  Re: Changes to IIS for stateless machine for Windows Azure

  May 28, 2012 03:25 PM|LINK

  Solution to item 1: // Set SSL to accept certificates using (ServerManager serverManager = new ServerManager()) { Configuration config = serverManager.GetApplicationHostConfiguration(); ConfigurationSection sslRestrictionSection = config.GetSection("system.webServer/security/access"); sslRestrictionSection.OverrideMode = OverrideMode.Allow; serverManager.CommitChanges(); } // Add virtual machine to point to WCF service using (ServerManager serverManager = new ServerManager()) { Configuration config = serverManager.Sites[RoleEnvironment.CurrentRoleInstance.Id + "_Web"].Applications["/WCFService"].GetWebConfiguration(); ConfigurationSection accessSection = config.GetSection("system.webServer/security/access"); accessSection["sslFlags"] = @"SslNegotiateCert"; serverManager.CommitChanges(); }
  • Marked as answer by Lloydz on May 30, 2012 08:41 AM