1 Introduction

This document provides information that will help you secure your MyID^® websites and web services.

MyID consists of a website and a number of web services hosted in Internet Information Services (IIS). IIS is part of Windows and provides security features to meet privacy and authentication requirements for MyID websites and web services. However, IIS needs to be configured to meet these requirements. The actual configuration needed depends on your installation of MyID.

IIS is a large product, created by Microsoft, and as such full documentation is available from Microsoft. The purpose of this guide is to assist configuring the security aspects of IIS to configure SSL and authentication features of IIS. Information in this guide is based on IIS 8.5 and IIS 10.0.

Where your MyID installation consists of multiple web servers, this configuration must be repeated for all MyID web servers in the MyID installation.