- 3 minutes to read

IIS - Binding Monitoring

Monitor IIS HTTPS bindings as dedicated IIS - Binding resources and validate each binding against installed certificates.

IIS - Binding category overview
Example of IIS - Binding resources in a Monitor View with category filter applied.

IIS - Binding State Evaluation

State Status Description Actions
🚫 Unavailable Service not available IIS is unreachable, the server cannot be contacted, or prerequisites are missing Review prerequisites
❌ Error Error state raised Missing bound certificate (orphaned binding), expired bound certificate, or hostname/SAN mismatch Details
⚠️ Warning Warning state raised Web Site without HTTPS binding, or bound certificate within warning threshold Details
✅ OK Online HTTPS binding is present and valid with matching certificate Subject/SAN Details

IIS - Binding Available Actions

For the IIS IIS - Binding Category, the Windows Server Monitoring Agent provides the following Remote Actions:

Details

Select the Details action to open the selected IIS binding details page.

IIS - Binding details
Example of the IIS - Binding Details page with binding and certificate match information.

The Details page provides:

  • Binding endpoint data (site, hostname, port, SNI)
  • Bound certificate identity (subject, SAN, thumbprint, expiration)
  • Match result between binding hostname and certificate Subject/SAN
  • Runtime health and remediation context for certificate-related binding issues

Configuration in IIS Tab

This feature was moved from certificate-specific configuration to the IIS tab in Remote Configuration.

Configuration Rules

  • Monitor IIS HTTPS Bindings
    When checked, each IIS HTTPS binding is surfaced as its own IIS - Binding resource and cross-referenced with installed certificates.
  • Requires Certificate monitoring
    Certificate monitoring must be enabled. If certificate monitoring is disabled while IIS Binding monitoring is enabled, configuration cannot be saved.
  • Graceful IIS handling
    The agent gracefully skips IIS Binding evaluation if IIS is not installed on the monitored server.

IIS Binding Alert Options

  • Alert on Missing Bound Certificate (Orphaned Binding)
    Generate ERROR when an IIS HTTPS binding references a certificate that is not present in monitored certificate stores, or has no certificate assigned.
  • Alert on Expired Bound Certificate
    Generate ERROR/WARNING for expired or expiring bound certificates using Warning/Error TimeSpan values from certificate general settings.
  • Alert on Hostname/SAN Mismatch (Error)
    Generate ERROR when binding hostname does not match certificate Subject or SAN. Wildcards like *.example.com are supported.
  • Alert on Web Sites Without HTTPS Binding
    Include web sites without HTTPS bindings as IIS - Binding resources and evaluate them as WARNING.

Next Steps

Back to IIS Overview
Add or manage Monitor View

IIS Overview - Main IIS monitoring page
IIS - Web Sites - Monitor and manage Web Sites
IIS - FTP Sites - Monitor and manage FTP Sites
IIS - Application Pools - Monitor and manage Application Pools
Certificate Configuration - Certificate thresholds used by IIS Binding alerts
FAQ: IIS Binding and SAN Monitoring