Configuring the Server for SSL (HTTPS)
- Updated on 05 Mar 2019
- 1 minute to read
The platform supports SSL encryption for secure transactions over HTTPS. To enable SSL in the Installer, click the Edit Settings button. In the Settings pop-up, navigate to the EndPointDefinition Collection Editor to ensure that the Ports are set to80 (HTTP) and 443 (HTTPS) . These values are set by default by the installer.
This example assumes that the platform has already been successfully installed. If you need help with installation, please see the following documents: https://documentation.decisions.com/category/installation-2/
This example also assumes you have an SSL certificate installed in IIS. Decisions can use either a signed certificate, or a Self Signed Certificate generated on the server.
Note: How to setup Website -> SHM Communication
- Signed Certificate: After installing the SSL certificate, ensure that the
LocallyAddressableIISWebsiteIP OrDNSNamein the settings.xml file points to the Url that the certificate is issued for. You can also do this in the below screenshot under "Edit Settings".
- Self Signed Certificate: Install Self Signed Certificate in Trusted Root CA (please visit Microsoft.com ) to ensure Local Computer valid communication.
Open the installer executable 'DecisionsInstaller.exe'. In the first step - Installation Type - click the Edit Settings button.
If you are using Port 443, you will not need to change the ControlInstanceEndpoints settings. Please only change if you are using an alternate port.
Locate ControlInstanceEndpoints , and click the (Collection) selector to open the EndPointDefinition Collection Editor dialog.
Select the second member, number 1, and confirm that the Port property matches the value used for your HttpsEndpointPort (typically port 443).
Click OK to close the pop-up.
Additionally, if you are using a signed certificate, you can modify the setting "LocallyAddressableIISWebsiteIPOrDNSName" to be the same name that is on the certificate. Please note, the computer will also have to be able to resolve to that DNS or IP, which may require modification of your networks DNS settings, or the server's hosts file. If you need more help, please contact support.
Click Save to save these settings and close the Settings pop-up.
Click the Restart Service button to restart the platform with the new settings.
Click Yes in the Restart Services pop-up to confirm that you would like to restart. When the platform restarts, SSL encryption will be enabled over the HTTPS port.