How to Enable SSL in IIS Express

DESCRIPTION:

Enable SSL in IIS Express. 

ARTICLE:

If you have recently upgraded from Enterprise TV 4 to Enterprise TV 5 and you are trying to enable SSL, please follow these instructions.
There will be several parts to this process, installing your SSL certificate and locating your Thumbprint hash code and then configuring Enterprise TV to use it.

Table of Contents

    1. Installing a SSL Certificate and getting your thumbprint hash code.
      1. Using a localhost certificate.
      2. Using your own SSL Certificate.

 

    1. Configuring Enterprise TV
      1. Enterprise TV 5.3.1 and below
      2. Enterprise TV 5.4 and beyond

 

  1. Test it.

 



Part 1A - Getting your Thumbprint hash code for your Localhost Certificate.

    1. Click Start - Run and type in MMC.exe and press Enter. 

 

    1. The Console window will appear and click on File - Add/Remove Snap In - Add - Certificates and click Add. 

 

    1. On the next screen it will prompt you to make a selection, select the Computer Account, click Next and then Finish. 

 

    1. Close the Add Standalone Snap-in window and then click Ok to the Add/Remove Snap-in window.

 

    1. Now under Console Root you should have Certificates (Local Computer), click on the plus sign to expand the listings, then click on the plus sign next to Personal to expand it and select Certificates. In the right window you will see the certificate. 

 

  1. Double click on the certificate in the right window and it should bring up a new window. Click on the Details tab and scroll all the way down to Thumprint and select it. This is your Thumbprint hashcode that identifies your new certificate. Copy it to notepad and remove all the spaces between the sets in the hashcode. 

    For example: 6c d8 7c b7 92 dc e6 b6 c3 ac 83 1e b3 64 8d 46 ec 94 c6 33 
    You want it to look like this: 6cd87cb792dce6b6c3ac831eb3648d46ec94c633 



Part 1B - Installing your own SSL Certificate and getting your Thumbprint hash code.

    1. Click Start - Run and type in MMC.exe and press Enter. 

 

    1. The Console window will appear and click on File - Add/Remove Snap In - Add - Certificates and click Add. 

 

    1. On the next screen it will prompt you to make a selection, select the Computer Account, click Next and then Finish. 

 

    1. Close the Add Standalone Snap-in window and then click Ok to the Add/Remove Snap-in window.

 

    1. Now under Console Root you should have Certificates (Local Computer), click on the plus sign to expand the listings, then right click on Personal and then hover over All Tasks and click on Import. The Certificate Import Wizard should appear, click Next.

 

    1. On the File to Import window, click on Browse and locate your certificate. You will want to import the "Personal Information Exchange" pfx file of your certificate. Please make sure you know the password to your certificate or the have key file that accompanies your certificate. After selecting the pfx file, click Next and it will prompt you for your password. If you have the key file, click Next and if you don't have it, enter your password and click Next. 

 

    1. On the Certificate Store window, you can just Place the certificate into Personal and click Next. Click Finish and OK to finish the import. 

 

    1. Now in the Console window under Personal should be a Certificates folder and your certificate should be listed in it. 

 

  1. Double click on your certificate in the right window and it should bring up a new window. On the General tab, verify at the bottom that the private key is present, you should see a message that says "You have a private key that corresponds to this certificate.". Once you have verified that, click on the Details tab and scroll all the way down to Thumprint and select it. This is your Thumbprint hashcode that identifies your new certificate. Copy it to notepad and remove all the spaces between the sets in the hashcode. 

    For example: 6c d8 7c b7 92 dc e6 b6 c3 ac 83 1e b3 64 8d 46 ec 94 c6 33 
    You want it to look like this: 6cd87cb792dce6b6c3ac831eb3648d46ec94c633 



 Part 2A - Configuring Enterprise TV 5.3.1 and below

 

    1. Click Start - Run - type in services.msc and click OK. The Services window should appear. 

 

    1. Scroll down in the window and select SnapStream IIS Express Wrapper and then Stop the service.

 

    1. Once the service is stopped, open My Computer and navigate to C:\Program Files\SnapStream Media\Enterprise TV\IISExpress\. 
      Edit the applicationhost.config file with notepad and add the following line: 

      <binding protocol="https" bindingInformation=":443:" /> 

      under: <binding protocol="http" bindinginformation=":80:" /> 

      Save the file after adding the line.

 

    1. Download httpcfg from this link and unzip it into the root directory of the C drive.

 

    1. Click on Start - Run and type in CMD and click Ok. A Command Prompt window should open. 

 

    1. Type in cd\ and press Enter, which will take you back to the C:\. 
      Type "httpcfg set ssl -i 0.0.0.0:443 -h 6cd87cb792dce6b6c3ac831eb3648d46ec94c633" where the quotes are not included and 6cd87cb792dce6b6c3ac831eb3648d46ec94c633 is your Thumbprint hash code from earlier that you saved in notepad. Press Enter to run the command and it should give you a line that says completed. 

 

    1. Close the window and go back to the Services window and restart the SnapStream IIS Express Wrapper service.




Part 2B - Configuring Enterprise TV 5.4.x and beyond

    1. Click Start - Run - type in services.msc and click OK. The Services window should appear. 

 

    1. Scroll down in the window and select SnapStream IIS Express Wrapper and then Stop the service.

 

    1. Once the service is stopped, download httpcfg from this link and unzip it into the root directory of the C drive.

 

    1. Click on Start - Run and type in CMD and click Ok. A Command Prompt window should open. 

 

    1. Type in cd\ and press Enter, which will take you back to the C:\. 
      Type "httpcfg set ssl -i 0.0.0.0:443 -h 6cd87cb792dce6b6c3ac831eb3648d46ec94c633" where the quotes are not included and 6cd87cb792dce6b6c3ac831eb3648d46ec94c633 is your Thumbprint hash code from earlier that you saved in notepad. Press Enter to run the command and it should give you a line that says completed. 

 

    1. Close the window and go back to the Services window and restart the SnapStream IIS Express Wrapper service.




Part 3 - Testing it

Open up a web browser and connect to the Enterprise TV Web Interface using https. You should be able to connect and login without any issues.

 


Note: If you would like to restrict users to only use https, remove <binding protocol="http" bindinginformation=":80:" /> from the applicationhost.config file that you edited previously.

If you need further assistance, please continue to submit a ticket to technical support.

Have more questions? Submit a request

0 Comments

Article is closed for comments.
Powered by Zendesk