IIS 7 Disabling "Require SSL"

Question

Deployed an ASP.NET application to our internal production server as a virtual directory under the default web site. I had been getting 403 errors when trying to connect to it. So I verified the folder permissions and when I went to look at the IIS (7) SSL settings I saw that "Require SSL", "Require 128-bit SSL" and require client certificates have been enabled. This application does not need SSL.

The problem is that these checkboxes and radio buttons have been greyed out and I can't seem to figure out how to disable them. Also, in the upper right hand corner of the IIS manager, I see in the alerts box "The site does not have a secure binding (HTTPS) and cannot accept SSL connections.

How do I disable the SSL settings?

Answer 1

For anyone else having this issue, here is what I found that cleared the SSL configuration:

appcmd set config "Default Web Site" /section:access /sslFlags:None /commit:APPHOST

Answer 2

That was a bug in IIS Manager, the workaround is to temporarily add a binding using SSL so that the checkboxes become enabled, then uncheck them, and remove the ssl binding. ALternatively using AppCmd, or Configuration Editor (in IIS Manager) you should be able to achieve that as well.

Just open IIS Manager, navigate to the site using the Tree view, and double click Configuration Editor, then select system.webServer/security/access in the section list. Change that value to None.