For IFS OI Server to work correctly, the SSL certificate for your domain needs to be bound to two ports:<\/p>\n
- \n
- One to the SSL website in IIS (usually 443).<\/li>\n
- One for the ServicePort specified in the configuration file (defaults to 8080).<\/li>\n<\/ul>\n
When setting up the website in IIS, the certificate will automatically be bound by IIS to the port configured for that website. However, there is no user interface to bind the certificate to the ServicePort, so this has to be done through the command line. The following command shows the current SSL bindings:<\/p>\n
netsh http show sslcert<\/pre>\n
The command to bind a certificate to the port is:<\/p>\n
netsh http add sslcert ipport=0.0.0.0:8080 certhash=f0fdac6d8dd1ea9dcec72bd33ed7cc1ccdc06008 \r\nappid={daf2e53d-2c3b-4fce-9d74-a5b618c52562}<\/pre>\nWhere:<\/p>\n
- \n
- ipport<\/strong> specifies the port to bind to.\u00a0Note: It is recommended to use 0.0.0.0<\/em> for the IP address as this will bind to any IPv4 address.<\/li>\n
- appip<\/strong> is a GUID that can be used to identify the owning application<\/li>\n
- certhash<\/strong> specifies the thumbprint of the certificate<\/li>\n<\/ul>\n
How to Get the Thumbprint (certhash)<\/h2>\n
- \n
- Open the Microsoft Management Console (Start > mmc.exe<\/em>).<\/li>\n
- In the Console Root, select Add\/Remove Snap-in<\/strong> from the File<\/strong> menu (File > Add\/Remove Snap-in<\/em>).
\n![\"image013\"](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2016\/07\/image013.png\")
<\/a>
\n\u00a0<\/li>\n- In the Add or Remove Snap-ins<\/strong> dialog box, click Certificates<\/strong> and then click Add<\/strong>, to move it to the Selected snap-ins<\/strong>.
\n<\/strong>A message appears, asking which account to manage the snap-in for.
\n![\"image015\"](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2016\/07\/image015.png\")
\n\u00a0<\/a><\/li>\n- Select Computer account<\/strong>, and then click Next<\/strong>.<\/li>\n
- Select the Local computer<\/strong>, and then click Finish<\/strong>.
\n![\"image017\"](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2016\/07\/image017.png\")
<\/a>
\n\u00a0<\/li>\n- Click OK<\/strong>.<\/li>\n
- In the Console Root, expand the Certificates<\/strong> node, then expand the Personal<\/strong> node and click Certificates<\/strong>.
\n![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2016\/07\/image019.png\")
\n\u00a0<\/a><\/li>\n- Right-click on the SSL certificate issued to your domain (e.g. *.petroleumplace.com<\/strong>), and select Properties<\/strong>.
\nNote: If there is no Details tab in the Properties dialog, double-click the certificate instead.
\n<\/em>\u00a0<\/li>\n- Click the Details<\/strong> tab, and copy the Thumbprint<\/strong> value to the clipboard.<\/li>\n
- Use this for the certhash<\/strong> value in the certificate binding command.<\/li>\n<\/ol>\n
Instructions for Binding<\/h2>\n
Before proceeding, ensure you have the correct ipport<\/strong> number, and copy the appid<\/strong> from the example below. However, you will need to obtain the correct thumbprint (certhash<\/strong>) of the certificate (see above).<\/p>\n
- \n
- Open a command prompt.<\/li>\n
- Bind the SSL certificate to the ServicePort by typing the following command:<\/li>\n<\/ol>\n
netsh http add sslcert ipport<\/span>=0.0.0.0:8080 certhash<\/span>=cd0a103f58b6e43c01254d6229ef5050cf189ea4 \r\nappid<\/span>={daf2e53d-2c3b-4fce-9d74-a5b618c52562}<\/pre>\nFor more details on configuring a port with an SSL certificate, go to https:\/\/msdn.microsoft.com\/en-us\/library\/ms733791(v=vs.110).aspx<\/a>.<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Since IFS OI Server only supports HTTPS, it must be deployed to a Web Site with an HTTPS binding configured. This article describes how to bind an SSL certificate to the ports required for IFS OI Server.<\/p>\n
- In the Console Root, select Add\/Remove Snap-in<\/strong> from the File<\/strong> menu (File > Add\/Remove Snap-in<\/em>).
- appip<\/strong> is a GUID that can be used to identify the owning application<\/li>\n
- ipport<\/strong> specifies the port to bind to.\u00a0Note: It is recommended to use 0.0.0.0<\/em> for the IP address as this will bind to any IPv4 address.<\/li>\n