Skip to content
Docs sslbrain sslbrain.com

HTTP.sys bindings (netsh)

Copy link to the page “HTTP.sys bindings (netsh)”

← All integrations

Windows · Web server

Binds certificates to services that use HTTP.sys without IIS.

The service agent on the server fetches the task from the appliance over outbound HTTPS on port 443 and installs the certificate locally on the server. The appliance never connects to the server.

What happens

  1. The service agent on the server fetches the task from the appliance over outbound HTTPS, port 443.
  2. The Windows basics first import the certificate into the Windows certificate store (LocalMachine\My).
  3. The certificate is bound to the HTTP.sys endpoint, IP address or host name and port. If it fails: Rollback puts the previous binding back.
  4. Verification: the package checks that the binding uses the new certificate.

Technical details

Connection
The package runs through the service agent on the server. The agent connects over outbound HTTPS to the appliance, port 443 by default. You open no port into the server.
You need
The service agent installed on the server.
Platform
Windows Server 2012 and later, Windows 10 and 11
Actions
Discovery, Installation, Verification, Rollback
Packages
windows-netsh

Get started