Deb Shinder outlines how to set up SSL for IIS nicely and Paul Wilson suggests a good way of forcing a redirect to use SSL with IIS and ASP.NET.