I used to write this article every year but didn't do it for few versions.
In this article we will discuss steps to Setup SSL Certificate in Business Central on-prem.
Steps in this article, can be followed with Business Central 21 or higher. I have tested this with Business Central 22. If something changes in Business Central future release, we will write a new article.
#msdyn365bc, #credentialtype
To start with We will create a Self-Signed Certificate.
- Open ISS Manager, Choose Server Certificates.
2. Create a New Self-Signed Certificate.
3. Copy the Certificate Thumbprint and DNS Name.
- Set-NAVServerConfiguration -ServerInstance BC220 -KeyName ServicesCertificateThumbprint -KeyValue Thumbprint
- Set-NAVServerConfiguration -ServerInstance BC220 -KeyName ClientServicesSSLEnabled -KeyValue true #This step is only for version 21 and later.
- Restart-NAVServerInstance -ServerInstance BC220
** Change Parameter in Bold.
5. Update Web Server Parameter.
- Set-NAVWebServerInstanceConfiguration -WebServerInstance BC220 -KeyName DnsIdentity -KeyValue DNSName
- Set-NAVWebServerInstanceConfiguration -WebServerInstance BC220 -KeyName RequireSsl -KeyValue true
- Set-NAVWebServerInstanceConfiguration -WebServerInstance BC220 -KeyName ServerHttps -KeyValue true
** Change Parameter in Bold.
6. Update Certificate permission for Service Account.
- Open MMC.exe.
- From File Menu, Select Add/Remove Snap in.
- Choose Certificate and add and choose Computer Account.
- Expand Personal Node and Select Certificate Folder.
- Choose Certificate, from all tasks, choose Manage Private Key.
- Make Sure that Service Account (Service Running with user), have permission to certificate.
- Bind Certificate with Web Site, Select Website, Choose Binding.
- Add new binding with https and map certificate.
Hopefully you learned something new in this article. You can also watch following steps below.
Comments
Post a Comment