--- title: "Configuring the Server for SSL (HTTPS)" slug: "configuring-the-server-for-ssl-https" tags: ["SSL", "HTTPS", "smtp", "Installation"] updated: 2025-11-26T21:05:38Z published: 2025-11-26T21:05:38Z canonical: "documentation.decisions.com/configuring-the-server-for-ssl-https" --- > ## Documentation Index > Fetch the complete documentation index at: https://documentation.decisions.com/llms.txt > Use this file to discover all available pages before exploring further. # Configuring the Server for SSL (HTTPS) ## Overview Decisions support using SSL (Secure Sockets Layer) encryption over HTTPS as an additional protection layer. This allows Administrators to further secure a transaction by creating an encrypted link between Decisions and the browser. The following document demonstrates how to configure a server for SSL encryption in a **v9 Installation**. In v9.17 and earlier, renewing a certificate required restarting the server. As of v9.18, the restart is no longer necessary. --- ## IIS Installation 1. Install/Import the certificate to the Windows certificate store. 2. Set up and enable **SSL Bindings** for HTTPS. Refer to Microsoft's Documentation for reference: [Create an SSL Binding](https://learn.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis#create-an-ssl-binding-1). 3. Open **DecisionsServerInstaller.exe** via **Run as administrator**, then click EDIT SETTINGS. 4. From the **Settings** window, adjust the listed Settings as follows, then click **Save**. | Setting | Suggested Configuration | | --- | --- | | EnableHttps | Set to "**true**" | | HttpsPort | Set to "**443**" | | PortalBaseUrl | If required, change "**http://**" to "**https://**" | | EnableHttptoHttpsRedirection | If required, set it to "**true**" | 5. Back in the **Installation Type** screen, click RESTART SERVICE. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2025-06-30_11h07_17.png) --- ## Self-Hosted Installation The following sections demonstrate the two methods by which HTTPS can be enabled in a [**Self-Hosted**](https://documentation.decisions.com/v9/docs/installation-requirements) environment. ### Physical File Path: During Installation 1. During [installation](https://documentation.decisions.com/v9/docs/installation-ms-sql#installing-decisions-part-2-database-setup-and-hosting-options-) from the Base Portal URL screen, check the **Enable Https** box. 2. Provide the proper **Port**, **Certificate** **location**, and, if required, the **Certificate Password**. 3. Enable the **Override Portal Base URL** to give a Fully Qualified Domain Name to the server URL.HTTPS Redirect If desired, check **Enable Http To Https Redirection** to redirect all HTTP requests to HTTPS. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2025-06-30_11h10_33.png) 4. Continue the installation process. ### Physical File Path: After Installation 1. After installation, run **DecisionsServerInstaller.exe** via **Run as administrator**. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2022-03-08_11h02_54.png) 2. From the **Installation Type** screen, click EDIT SETTINGS.![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2025-06-30_11h14_52.png) 3. From the **Settings** window, adjust the following settings as shown. Then click **Save**.Alternate Settings Location The following settings can also be adjusted via the **Settings.xml** file located at **C:\Program Files\Decisions\Decisions Server**. | Setting | Suggested Configuration | | --- | --- | | EnableHttps | Set to True | | HttpsCertificatePassword | Provide the applicable Password for the Certificate; if there is no Password, leave this blank. | | HttpsCertificatePath | Provide the physical File Path for the certificate. | | HttpsPort | Keep set to 443 | | PortalBaseUrl | Change "http://" to "https://" | ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2025-06-30_11h16_35.png) 4. Restart Decisions via the [RESTART SERVICE](https://documentation.decisions.com/v9/docs/restart-decisions-application) button. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2025-06-30_11h17_14.png) 5. Navigate to the **Portal Base URL**. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/image-1619533936537.png) --- ## Certificate Store Users can install **Certificates** in the **Certificate** **Store** and read the respective Certificate Information from it. Decisions Readable StoreCurrently, a Decisions environment can only read Certificates from the **LocalMachine > Personal** store.  ### Opening Certificate Store The **Certificate Store** is the location wherein Windows stores its **.****cert** files. By using the **Manage computer certificates** panel, Administrators can locate, view, **Import**, and **Export** digital Certificates for use throughout the **Local** **Machine**. 1. From the **Local File System**, via the **Search** tool, search for and open **Manage computer certificates**. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2022-03-08_13h40_57.png) 2. From the **Folder** **Tree** on the left,  expand the **Personal** node. 3. View the respective information to the right of each **Certificate** in the store. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2021-07-13_13h00_20.png) ### Installer **Certificates** can be added during the installation process of the Decisions server. 1. From the **Portal Base Url** screen, check **Enable Https**. 2. Under **Pick Certificate Source**, select **Certificate Store**. 3. If required, adjust the **Port** value, then select the desired **Certificate** from the drop-down. 4. Proceed with the rest of the [installation](https://documentation.decisions.com/v9/docs/installation-ms-sql) process.![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2025-06-30_11h21_48.png) ### Settings.xml In addition to **DecisionsServerInstaller.exe**, **Certificate** **Store** directions can be defined via the **Settings.xml** file. 1. From the **Local File System**, navigate to **C:\Program Files\Decisions\Decisions Server** and open **Settings.xml** in a **Text Editor**. 2. Locate the **CertificateThumbPrint** and **HttpsCertificateLocation** tags. 3. Specify **CertificateStore** value to the **HttpsCertificateLocation** node. 4. Provide the [**Certificate** **Thumbprint**](https://docs.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-retrieve-the-thumbprint-of-a-certificate) to its respective space. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2021-07-13_13h02_43.png) 5. **Save** and close the file. --- Decisions IIS Hosted environmentsDecisions supports CA (certificate authority) and self-signed SSL certificates installed via IIS. ## Self-Signed Certificate Generation Script By default, Decisions Installations provides a **Self-Signed Certificate Generator** in the **Decisions Server** folder. This **Windows PowerShell** **Script** allows the creation of a **Certificate** that can be used for testing **v8** **SSL** configurations in **self-hosted** and IIS environments. 1. From the **Local File System**, navigate to **C:\Programs Files\Decisions\Decisions Server**. 2. Locate **GenerateCertificate**, then run it with **PowerShell** as an **Administrator**. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2022-03-08_14h11_21.png) 3. From the **PowerShell** window, type ".**/GenerateCertificate.ps1**". Then, press enter; verify that the script successfully creates a **Certificate** called "Decisions.cer". ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/image-1609178095554.png) #### Certification Expiration If the **Certificate** for SSL expires, access to the server will not be available until fixed. Fixing this includes getting the new Certificate installed. If the **Certificate** **Name** does not change, [**Recycle IIS**](https://docs.microsoft.com/en-us/iis/configuration/system.applicationhost/applicationpools/add/recycling/). If the Certificate Name changes, then update the **SSL Certificate** in the **Site** **Bindings** to use the new Certificate. --- ## STARTTLS Configuration STARTTLS is an email protocol command that uses SSL/TSL to convert an Email Client's connection from an insecure one into a secure one. When using STARTTLS with Decisions, users should configure their **SMTP** **Settings** as they typically would. ### Explicit SSL By default, Decisions requests that SSL is used explicitly. To enable this: 1. Open **DecisionsServerInstaller.exe**; from the **Installation Type** screen, click EDIT SETTINGS. 2. From the **Settings** window, navigate to expand **Mail > SmtpServer**. 3. Under the **SmtpServer** category, set **UseImplicitSSL** to **False** and **UseSSL** to **True**. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2025-06-30_12h14_51.png) 4. Click **Save**, then [restart](https://documentation.decisions.com/v9/docs/restart-decisions-application) Decisions via RESTART SERVICE. --- ## Feature Changes | Description | Version | Release Date | Developer Task | | --- | --- | --- | --- | | Restarts are no longer needed for renewed certificates. | [9.18](https://documentation.decisions.com/v99/docs/version-918x-release-notes) | December 2025 | [DT-045637] | For further information on Installation, visit the [Decisions Forum](https://community.decisions.com/categories/InstallationSetup).