- 3 minutes to read

IIS - Binding Monitoring

Monitor IIS HTTPS bindings as dedicated IIS - Binding resources and validate each binding against installed certificates.

IIS - Binding category overview
Example of IIS - Binding resources in a Monitor View with category filter applied.

IIS - Binding State Evaluation

State Status Description Actions
Unavailable Service not available IIS is unreachable, the server cannot be contacted, or prerequisites are missing Review prerequisites
Error Error state raised Missing bound certificate (orphaned binding), expired bound certificate, or hostname/SAN mismatch Details
Warning Warning state raised Web Site without HTTPS binding, or bound certificate within warning threshold Details
OK Online HTTPS binding is present and valid with matching certificate Subject/SAN Details

IIS - Binding Available Actions

For the IIS IIS - Binding Category, the Windows Server Monitoring Agent provides the following Remote Actions:

Details

Select the Details action to open the selected IIS binding details page.

IIS - Binding details
Example of the IIS - Binding Details page with binding and certificate match information.

The Details page provides:

  • Binding endpoint data (site, hostname, port, SNI)
  • Bound certificate identity (subject, SAN, thumbprint, expiration)
  • Match result between binding hostname and certificate Subject/SAN
  • Runtime health and remediation context for certificate-related binding issues

Configuration in IIS Tab

This feature was moved from certificate-specific configuration to the IIS tab in Remote Configuration.

Configuration Rules

  • Monitor IIS HTTPS Bindings
    When checked, each IIS HTTPS binding is surfaced as its own IIS - Binding resource and cross-referenced with installed certificates.
  • Requires Certificate monitoring
    Certificate monitoring must be enabled. If certificate monitoring is disabled while IIS Binding monitoring is enabled, configuration cannot be saved.
  • Graceful IIS handling
    The agent gracefully skips IIS Binding evaluation if IIS is not installed on the monitored server.

IIS Binding Alert Options

  • Alert on Missing Bound Certificate (Orphaned Binding)
    Generate ERROR when an IIS HTTPS binding references a certificate that is not present in monitored certificate stores, or has no certificate assigned.
  • Alert on Expired Bound Certificate
    Generate ERROR/WARNING for expired or expiring bound certificates using Warning/Error TimeSpan values from certificate general settings.
  • Alert on Hostname/SAN Mismatch (Error)
    Generate ERROR when binding hostname does not match certificate Subject or SAN. Wildcards like *.example.com are supported.
  • Alert on Web Sites Without HTTPS Binding
    Include web sites without HTTPS bindings as IIS - Binding resources and evaluate them as WARNING.

Next Step

Back to IIS Overview
Add or manage Monitor View

IIS Overview - Main IIS monitoring page
IIS - Web Sites - Monitor and manage Web Sites
IIS - FTP Sites - Monitor and manage FTP Sites
IIS - Application Pools - Monitor and manage Application Pools
Certificate Configuration - Certificate thresholds used by IIS Binding alerts
FAQ: IIS Binding and SAN Monitoring