X-ERP Help

04. Activate Internet Information Services

Enable IIS as a clearly defined web server for X-ERP and enable application pool, website, HTTPS and logging.

IIS is the front door of X-ERP. A good door is accessible, records every entry and does not open more rooms than necessary.

Why this station counts

IIS accepts HTTPS requests and forwards them to the X-ERP application via the ASP.NET Core Module. Roles, application pool, bindings, certificate and logs therefore belong in a common operating plan.

The resilient process

  1. Add the IIS web server role and administration functions required for X-ERP.
  2. Check IIS Manager and Default Page locally.
  3. Plan website, application pool, hostname, port, path and service identity.
  4. Set log storage, retention and monitoring.
  5. Restrict firewall rules to the subsequent HTTPS connection.

Functional test - only then continue

  • IIS service runs after restart.
  • Local test reaches the web server.
  • Logs are written and have free memory.
  • No unnecessary sample application remains publicly accessible.

If the result is not correct

  • Too many installed roles increase the attack and maintenance surface.
  • A port without a hostname can collide with other websites.
  • Logs without rotation fill the system volume unnoticed.

This is what you take with you

The web server is lightweight, observable and ready for .NET Hosting Bundle and X-ERP website.

Video

Activate Internet Information Services

Further information / source

Related topics

  1. For system administrators – set up servers and create company databases › 05. Install .NET Hosting Bundle
  2. For system administrators – set up servers and create company databases › 08. Install X-ERP
  3. For system administrators – set up servers and create company databases › 10. Set up certificate

Frequently asked questions

**Why IIS before Hosting Bundle?**

The hosting bundle sets up the ASP.NET Core Module for IIS; the IIS role should therefore already exist.

**Is HTTP sufficient?**

For productive logins and data transfer, use HTTPS with a valid certificate.