Options for administering & updating IHS when in front of Domino 9.0?

When using the IBM HTTP Server to provide TLS support for Domino, how can IHS be administered with any degree of ease? Is there any web admin capability there at all?

Can the IHS server installed with Domino 9.0 be updated to address vulnerabilities fixed through version 8.5.0.2? If so, are there known pitfalls to be avoided?

All thoughts and experiences would be appreciated. Thanks.

Subject: Updating IHS 8.5.0.0 to 8.5.5.0 - how to.

After waiting for Domino 9.0.1 to arrive, I found that performing an upgrade from 9.0.0 to 9.0.1 via a “dirty” install (using the full 9.0.1 installer to update an existing 9.0.0 installation), I contacted support.

Within hours, the problem had been recreated, verified, recognized internally as known behavior (functioning as intended/designed), and a solution offered.

Before installing 9.0.1. remove or rename the IHS directory. Only then will the re-installation write the updated IHS content included in 9.0.1.

I’m lazily including a screenshot showing reported information after the install (which I received from IBM support). Point being that Domino 9.0.1 includes IHS 8.5.5.0 (where Domino 9.0.0 included IHS 8.5.0.0)