IIS

You may like to install WinCache Extension for PHP, but you always get a message "PHPPATH property must be set to the directory where PHP resides.". You cannot set this variable as environment variable. You need to provide it to the MSI file as variable. Additionally they integrated another license nag screen that will be skipped with IACCEPTWINDOWSCACHEFORPHPLICENSETERMS. Make sure the path to PHP has always a trailing slash or the php_wincache.dll is not installed to your PHP\ext folder, but somewhere else!

The complete command is:

msiexec /i wincachewpi-2.0.0.8-7.3-nts-vc15-x64\wincache73x64wpi.msi PHPPATH=C:\PHP\ IACCEPTWINDOWSCACHEFORPHPLICENSETERMS="Yes" /q

• 12.07.2019 Created documentation.

If you are using CFCONTENT with images or PDFs you will run into serious troubles with ColdFusion 10 Updater 14. These updater contains an upgrade of the IIS connector and will break your websites. This is known to be an issue with ColdFusion 11 and ColdFusion 10. The bug has been logged with Adobe as coldfusion 10 update 14. failed to load pdf document, but the issue goes far beyond PDFs.

Symptoms:

• An URL use CFCONTENT tag to output a PDF or an image to the browser. If you have URL parameters attached to this URL it will fail to download.
• Wireshark traces show that no binary data is send to the web browser. You only see a GET and some headers, but no content.

Workarounds:

1. Replace Updater 14 connector DLL C:\ColdFusion10\config\wsconfig\[ID]\isapi_redirect.dll with the connector DLL from Updater 12.
2. Uninstall CF 10 Updater 14

Repro case:

This PowerShell script setups your Windows Computer to support TLS 1.1 and TLS 1.2 protocol with Forward secrecy. Additionally it increases security of your SSL connections by disabling insecure SSL2 and SSL3 and all insecure and weak ciphers that a browser may fall-back, too. This script implements the current best practice rules. It was originally written for Microsoft Internet Information Server 7.5/8.0/8.5/10 (IIS) on Windows 2008R2/2012/2012R2/2016/2019, but the below settings implements system wide settings that work for everything that uses the Microsoft Crypto infrastructure. This means Microsoft Exchange and Internet Explorer and Edge and all applications that use WinHTTP API, too. It works on both Windows Desktops and Servers.

After you have added below registry entries you may like to verify that your server offers the much more secure SSL connections. There is the great https://www.ssllabs.com/ssltest/ site that gives you a feeling how secure your SSL connections are. You should get a Summary like these:

This article describes how you can setup a proxy server on an existing Microsoft IIS Server in your company to tunnel the ShoreTel Communicator for iPhone App calls to your internal ShoreTel server. ShoreTel was so kind to document this with Apache, but not with IIS. If you do not like to run Apache as an extra instance in your company only for the ShoreTel App you can follow this document and save your time as this solution is really easy to implement.

Installation