PME 2021+ HTTPS Configuration
General Settings using the server's FQDN
lIS Configuration
NOTE: As of PME 10.0 (2021), a Self-signed certificate is installed automatically by default.
1. Open IIS
2. Install a valid SSL Certificate where the "issued to" field matches the server's Fully Qualified
Domain Name (FQDN).
a. This document does not cover installing a Certificate Authority issued SSL
certificate! There are many resources online such as: Godaddy SSL overview.
b. By default PME installs a Self-Signed certificate. For manual instructions refer
to: Create a Self-Signed Server Certificate in IIS.
3. To edit the Bindings, click Sites -> Default Web Site, and select Bindings... from the actions
menu.
a. Select https and click Edit...
b. The default port is 443. (If you want to use an alternate port such as 567 then your
URL becomes [Link]
c. Select the desired SSL Certificate. (default will be Local Self-Signed)
d. You may add a Host name value to the binding, this value can be left blank (wildcard)
OR it must match the selected certificates "Issued To" property.
4. OPTIONAL: The http binding can be deleted completely from the default Web site
provided the rest of the configurations on this page are deployed. Otherwise the http
binding is required by PME.
PME Configuration
Application Modules Database update
1. Open SQL Server Management Studio and connect to the PME SQL server.
2. Navigate to Databases -> ApplicationModules -> Views
3. Right-click on [Link] and selectEdit Top 200 Rows
4. Find the entry in the result set with the following values:
a. ItemType = Web Framework
b. Item = Server
c. Key = LocalServerAddress
5. Update the Value column to include the servers FQDN (and port if required). Example:
assuming the https binding certificate is for the host [Link] with the default
port then the correct
value would be: [Link] or [Link]
6. Find the entry in the result set with the following values:
a. ItemType = Web Framework
Internal
b. Item = Url
c. Key = RemoteAccessHost
7. Update the Value column to include the servers FQDN (and port if required). Example:
assuming the https binding certificate is for the host [Link] with the default
port then the correct
value would be: [Link] or [Link]
ION_Network Database update
1. Open SQL Server Management Studio and connect to the PME SQL server.
2. Navigate to Databases -> ION_Network -> Views
3. Right-click on dbo.vCFG_ConfigItems and select Edit Top 200 Rows
4. Find the entry in the result set with the following values:
a. Module = Reporting
b. Category = General Settings
c. Item = WebServiceUrl
5. Update the Value column to include the servers FQDN (and port if required). Example:
assuming the https binding certificate is for the host [Link] with the default
port then the correct
value would be: [Link]
or [Link]
WebServices [Link] update
1. Open the following file in a text editor: [INSTALL
FOLDER]\system\WebServices\[Link]
2. Navigate to the following section of the XML file: <Configuration> ->
<[Link]> -> <services>
3. You must "comment out" the default http endpoint bindings...
<services>
<service name="[Link]">
<endpoint binding="basicHttpBinding"
contract="[Link]"
behaviorConfiguration="SOAPBehavior" bindingConfiguration="http" />
<!--<endpoint binding="basicHttpBinding"
contract="[Link]"
behaviorConfiguration="SOAPBehavior" bindingConfiguration="https" />-->
</service>
<service name="[Link]">
<endpoint binding="webHttpBinding" contract="[Link]"
behaviorConfiguration="RESTBehavior" bindingConfiguration="http" />
<!--<endpoint binding="webHttpBinding" contract="[Link]"
Internal
behaviorConfiguration="RESTBehavior" bindingConfiguration="https" />-->
</service>
<service name="[Link]">
<endpoint binding="webHttpBinding" contract="[Link]"
behaviorConfiguration="RESTBehavior" bindingConfiguration="http" />
<!--<endpoint binding="webHttpBinding" contract="[Link]"
behaviorConfiguration="RESTBehavior" bindingConfiguration="https" />-->
</service>
<service name="[Link]">
<endpoint binding="webHttpBinding" contract="[Link]"
behaviorConfiguration="RESTBehavior" bindingConfiguration="http" />
<!--<endpoint binding="webHttpBinding" contract="[Link]"
behaviorConfiguration="RESTBehavior" bindingConfiguration="https" />-->
</service>
</services>
After edits the section should look like this:
<services>
<service name="[Link]">
<!--<endpoint binding="basicHttpBinding"
contract="[Link]"
behaviorConfiguration="SOAPBehavior" bindingConfiguration="http" />-->
<endpoint binding="basicHttpBinding"
contract="[Link]"
behaviorConfiguration="SOAPBehavior" bindingConfiguration="https" />
</service>
<service name="[Link]">
<!--<endpoint binding="webHttpBinding" contract="[Link]"
behaviorConfiguration="RESTBehavior" bindingConfiguration="http" />-->
<endpoint binding="webHttpBinding" contract="[Link]"
behaviorConfiguration="RESTBehavior" bindingConfiguration="https" />
</service>
<service name="[Link]">
<!--<endpoint binding="webHttpBinding" contract="[Link]"
behaviorConfiguration="RESTBehavior" bindingConfiguration="http" />-->
<endpoint binding="webHttpBinding" contract="[Link]"
behaviorConfiguration="RESTBehavior" bindingConfiguration="https" />
</service>
<service name="[Link]">
<!--<endpoint binding="webHttpBinding" contract="[Link]"
behaviorConfiguration="RESTBehavior" bindingConfiguration="http" />-->
<endpoint binding="webHttpBinding" contract="[Link]"
behaviorConfiguration="RESTBehavior" bindingConfiguration="https" />
</service>
</services>
Internal
4. Add the line in bold to the <Configuration><[Link]><securtity> section below
(assuming the SSL certificate is issued to the host [Link])
<security>
<ipSecurity allowUnlisted="false">
<add ipAddress="[Link]" allowed="true" />
<add domainName="[Link]" allowed="true"/>
</ipSecurity>
</security>
You may have to update the Hosts file as follows.
1. Navigate to: C:\Windows\System32\drivers\etc
2. Open the file hosts in a Notepad
3. Add an entry for your domain mapped to [Link]
a. Example: assuming the https binding certificate is for the
host [Link] then the correct
value would be: [Link] [Link]
4. If this entry was not present, you must flush the local DNS cache. This may be done in 2
ways:
a. In a command window, run this command: ipconfig /flushdns
b. Alternately, you may reboot the server (you may need to reboot server after
completing final steps)
Default Web Application link update
1. Open a Windows explorer window and navigate to: Desktop -> StruxureWare Power
Monitoring Expert
2. Right-click on Web Applications and select Properties
3. Update the URL value with the updated url
a. Example: assuming the https binding certificate is for the
host [Link] with the default port then the correct
value would be: [Link]
b. Example: assuming the https binding certificate is for the
host [Link] with the port 567, then the correct
value would be: [Link]
Final Steps
1. Open a windows Command window ([Link]) and run iisreset
2. Open the windows Services console, and restart the following service: ApplicationModules
CoreServicesHost
a. Click Yes to restart ApplicationModules services
3. Restart the browser before validating the configuration.
Internal