use WMI Set SSLbingings on IIS

The IIS WMI soap path is "//servername/root/WebAdministration" so we can remote to configure the server IIS.

always use the connection options at below:

string ospath = String.Format( @"//{0}/root/WebAdministration", "IISserver"); ConnectionOptions conops = new ConnectionOptions(); conops.Username = @"./administrator"; conops.Password = "admin"; conops.Authentication = AuthenticationLevel.PacketPrivacy; conops.Impersonation = ImpersonationLevel.Impersonate; conops.EnablePrivileges = true; ManagementScope scope = new ManagementScope(ospath, conops);

 then connect to the site which we want to configure like this

string sitePath = "Site.Name=/"Defaut web site/""; ManagementObject wmiSite = new ManagementObject( scope, new ManagementPath(sitePath), new ObjectGetOptions());

 

check the port which we want set  sslbinging if not exist create it;

ManagementBaseObject[] binds = (ManagementBaseObject[])wmiSite["Bindings"]; const int DefaultSSLPort = 443; bool findbing = false; foreach (ManagementBaseObject o in binds) { if (o.Properties["BindingInformation"].Value.ToString().Contains("443")) { findbing = true; } } if (!findbing) { ManagementClass newOne = new ManagementClass(scope, new ManagementPath("BindingElement"), new ObjectGetOptions()); newOne["BindingInformation"] = "*:443:"; newOne["Protocol"] = "https"; ManagementBaseObject[] newbinds = new ManagementBaseObject[binds.Length + 1]; System.Array.Copy(binds, newbinds, binds.Length); newbinds[binds.Length] = newOne; wmiSite["Bindings"] = newbinds; wmiSite.Put(); }

 

set ssl binging on the port

ManagementClass bingings = new ManagementClass(scope, new ManagementPath("SSLBinding"), new ObjectGetOptions()); foreach (ManagementObject o in bingings.GetInstances()) { if (DefaultSSLPort.ToString(System.Globalization.CultureInfo.InvariantCulture).Equals(o["Port"].ToString())) { findbing = true; o["CertificateHash"] = "‎3f81c2ae2af065527db6a81f685ff5f40d35d772"; //o["StoreName"] = "MY"; o.Put(); } } bingings.Put(); if (!findbing) { ManagementObject newInstance = bingings.CreateInstance(); newInstance["IPAddress"] = "*"; newInstance["Port"] = "8531"; newInstance["CertificateHash"] = "‎3F81C2AE2AF065527DB6A81F685FF5F40D35D772"; newInstance["StoreName"] = "MY"; newInstance["BindingOwnerId"] = "{FCC26113-63A1-4DB5-BEB1-BC6CC54F1A11}"; newInstance.Put(); } bingings.Put();

 

note: the certficate must already exist in the My store on localmachine, for example use makecert create a self-signed ca run cmd

 makecert -r -pe -n "CN=iisserver" -b 03/01/2011 -e 03/01/2012 -ss my -sr localMachine -sky exchange

that's all!