Skip to main content

Microsoft IIS

Connects the CLM to Windows IIS servers for discovery and deployment of certificates on HTTPS bindings via a Linux agent + SSH.


Uses of this integration​

FeatureSupported
Discovery of certificates on HTTPS bindings✅
Deploy of certificates on HTTPS bindings (via Store)✅
Automatic creation of Stores per binding✅
Certificate issuance❌

Prerequisites​

On the Windows IIS server:

  • OpenSSH Server installed and the sshd service running
  • DefaultShell pointing to powershell.exe
  • TCP port 22 open for the Linux agent
  • PowerShell WebAdministration module present (included by default in IIS)

Linux CLM Agent installed and online with SSH network access to the IIS server.

Linux Agent required
See the [Install the Agent — Linux](/guias/agente/linux) guide to install and configure the agent before registering this integration.

Register​

IIS servers can be registered directly in the Discovery Wizard when creating a new IIS discovery job, without needing to access the Integrations screen separately. After the first discovery, the server becomes available for reuse in future jobs.

To register manually:

  1. Go to Integrations in the sidebar menu and click the IIS tab
  2. Click + Configure
  3. Fill in the fields:
FieldDescription
NameName to identify the server, e.g. Srv-IIS-2019
Hostname / IPAddress of the IIS server, e.g. 172.28.128.194
SSH PortDefault: 22
SSH UserUser with write permission on the bindings, e.g. Administrator
Linux AgentAgent that will open the SSH session
Authentication typePassword or SSH Key
  1. Click Save

Edit and Delete​

Click the ⋮ menu on the integration card to edit or delete. Remove the linked Stores and discovery jobs before deleting.