How Do I - Configure NavUserPassword with Business Central on-prem with Certificate?

Hi Readers,

I used to write this article every year but didn't do it for few versions. 

In this article we will discuss steps to Setup SSL Certificate in Business Central on-prem.

Steps in this article, can be followed with Business Central 21 or higher. I have tested this with Business Central 22. If something changes in Business Central future release, we will write a new article. 

#msdyn365bc, #credentialtype

To start with We will create a Self-Signed Certificate.

1. Open ISS Manager, Choose Server Certificates.

    2. Create a New Self-Signed Certificate.

    

    3. Copy the Certificate Thumbprint and DNS Name.

    4. Update Service Tier.

• Set-NAVServerConfiguration -ServerInstance BC220 -KeyName ServicesCertificateThumbprint -KeyValue Thumbprint

• Set-NAVServerConfiguration -ServerInstance BC220 -KeyName ClientServicesSSLEnabled -KeyValue true #This step is only for version 21 and later.

• Restart-NAVServerInstance -ServerInstance BC220

** Change Parameter in Bold.

    5. Update Web Server Parameter.

• Set-NAVWebServerInstanceConfiguration -WebServerInstance BC220 -KeyName DnsIdentity -KeyValue DNSName

• Set-NAVWebServerInstanceConfiguration -WebServerInstance BC220 -KeyName RequireSsl -KeyValue true

• Set-NAVWebServerInstanceConfiguration -WebServerInstance BC220 -KeyName ServerHttps -KeyValue true

** Change Parameter in Bold.

    6. Update Certificate permission for Service Account.

• Open MMC.exe.
• From File Menu, Select Add/Remove Snap in.
• Choose Certificate and add and choose Computer Account.

    

• Expand Personal Node and Select Certificate Folder.
• Choose Certificate, from all tasks, choose Manage Private Key.

• Make Sure that Service Account (Service Running with user), have permission to certificate.

• Bind Certificate with Web Site, Select Website, Choose Binding.
• Add new binding with https and map certificate.

Hopefully you learned something new in this article. You can also watch following steps below.

Regards,
Saurav Dhyani
www.sauravdhyani.com