Skip to content
GBG Documents & Biometrics Documentation

Example: a secure (HTTPS) License Server with IIS

This section describes a sample configuration of AssureID LocalHost to function as a license server.

Note: There are two ways to certify the LocalHost: you can configure a self-signed certificate, or buy a certificate issued by a trusted authority.

This is a multi-step process that includes the following procedures:

  1. Installing IIS Manager and IIS Express
  2. Enabling IIS on Windows 10 and 11
  3. Configuring a secure website
  4. Configuring the self-signed certificate to localhost by either: Configuring a self-signed certificate to localhostor Purchasing a certificate issued by a trusted authority.
  5. Adding certifications for your connected computer
  6. Verifying the license server

Install IIS Manager and IIS Express

  1. Install IIS Manager on a computer running either Microsoft Windows 10 or 11.
  2. From the Start menu, type Features, and then select Turn Windows features on or off.
  3. Select Internet Information Services and then click OK.
  4. When the installation is complete, click Close.
  5. Download iisexpress_amd64_en-US.msi from the Microsoft website at https://www.microsoft.com/.
  6. Install IIS Express.

Enable IIS on Windows 10 and 11

  1. From the Start menu, type Features, and then select Turn Windows features on or off.

    AssureID LocalHost Configuration Example

    AssureID LocalHost Configuration Example

  2. Select the Internet Information Services checkbox, and then click OK.

  3. When Windows completes the changes to enable this feature, restart your computer.

Configure a secure website

  1. Open Internet Information Services (IIS) Manager:

    Open Internet Information Services (IIS) Manager

  2. Right-click Sites, and then select Add Website:

    Right-click Sites, and then select Add Website

  3. Configure the secure website by using the following settings shown in the Add Website window:

Setting Description
Site Name Name of the site (for example, secure)
Physical Path SystemDrive%\inetpub\wwwroot%
Type HTTPS (Secured). HTTP (Unsecured)
Port 443 (Secured). 1955 (Unsecured)
Select SSL certificate IIS Express Development Certificate

  1. Click OK.

  2. To edit the binding configuration, right-click secured site and select Edit Bindings.

    To edit the binding configuration, right-click secured site and select Edit Bindings.

The Edit Site Binding window opens.

The Edit Site Binding window opens.

  1. Select SSL Settings.

    Select SSL Settings.

    The SSL Settings page opens.

  2. Specify the setting and in the Actions pane, click Apply .

Specify the setting and in the Actions pane, click Apply .

Configure a self-signed certificate to a Trusted Root Certification Authority

  1. Go to Start > Run and type mmc.exe.

  2. Go to File > Add or Remove Snap-ins > Certificates and click Add.

    Go to File > Add or Remove Snap-ins > Certificates and click Add.

  3. Select the Computer account option and click Next.

    Select the Computer account option and click Next.

  4. In the Select Computer window, click Local Computer.

    In the Select Computer window, click Local Computer.

  5. Click Finish.

Add a purchased self-signed certificate from a Trusted Root Certification Authority

  1. Start mmc.exe.

  2. Click File > Add or Remove Snap-ins > Certificates > Add > Computer account > Local Computer.

  3. Click Finish.

    To view your localhost certificate, in the left pane, expand the Personal folder and click Certificates.

    To view your localhost certificate, in the left pane, expand the Personal folder and click Certificates.

  4. Copy the certificate into the Trusted Root Certification Authorities – Certificates folder.

  5. Open IIS Manager or inetmgr.exe.

  6. On your site, select Bindings, and then Add or Edit, and select your certificate from the dropdown menu.

  7. Manage the certifications at the site.

    Manage the certifications at the site.

  8. In IIS, browse to your secure localhost.

Verify the license installation

  1. Run AssureTec.LicenseServerTray.exe to verify that your License Server was installed on your computer.

  2. On the Service tab, select the HTTPS option and enter the secured site:port.

    On the Service tab, select the HTTPS option and enter the secured site.

  3. Click Save. If successful, a confirmation dialog box appears.

  4. Select the Connect to secure port in license server checkbox.

    Select the Connect to secure port in license server checkbox.

Activate the license

  1. Verify that the License Activator was installed on your computer.

    Verify that the License Activator was installed on your computer.

  2. Verify the secured site:port.

  3. Click Activate License.

Add certifications for your connected computer

  1. Specify the computer than you want to manage with the snap-in.

    Specify the computer than you want to manage with the snap-in.

    Specify the computer than you want to manage with the snap-in.

  2. Click Finish.

Verify the license server

  1. Run AssureTec.LicenseServerTray.exe.

  2. Select the HTTPS option and enter the secured site:port.

  3. Click Verify. If the license server is connected, the message Successfully connected to the remote license server message is displayed.

  4. Verify that the License Activator was installed on your connected computer, and then verify the secured site:port.

  5. Click OK.

    Click OK.