encrypt the entire message being sent. We now implement message-level security in this scenario for Internet Information Server V5. B.3.1 Configuring the .NET Web service to require SSL The .NET Web service depends on Microsoft Internet Information Services (IIS) in order to provide SSL support. Therefore, we must begin by visiting the IIS console and the .NET directory previously created there. From here, we request, then install, a server certificate for the usage of SSL between the .NET Web service and J2EE client. Tip: In our sample scenario, we chose not to request the necessary server certificate from an outside Certificate Authority (CA); we chose to use the Microsoft Certificate Services to generate our server certificate. Microsoft Certificate Services is a Windows 2000 Server component that can be added to the operating system from the Windows 2000 Server CD, if it has not been installed previously. Requesting a server certificate Perform the following where the .NET Framework and IIS are installed: 1. Click Start Programs Administrative Tools Internet Services Manager to load the IIS console. 2. Navigate to the Web page where the ManufacturerB virtual directory exists. If you followed prior instructions, this would be located in the Default Web Site virtual root. 3. Right-click Default Web Site and select Properties. 4. In the properties window, navigate to the Directory Security tab and click the Server Certificate button. This loads the Web Server Certificate Wizard. 5. Click Next to bypass the welcome dialog box of the wizard. 6. Select the Create a new certificate radio button and click Next. 7. In the next window, select Prepare the request now, but send it later radio button and click Next. 8. Here, input Manufacturer B Web Server in the Name field and select 1024 in the bit length drop-down menu (Figure B-13 on page 502) and click Next. Appendix B. Microsoft .NET Web services 501