Not secure http://localhost:8080/DynamicsNAV110 to https://localhost:8080/DynamicsNAV110 (HTTP - HTTPS)

[Ayinde01]

Hi Team,

I read and follow this link https://ksdconsultancy.blog/2015/11/04/configuring-ssl-to-secure-the-connection-to-microsoft-dynamics-nav-web-client/ but I don’t achieve it.

I have generated my SSL Certificated but I can’t connect with this below:

%systemroot%\inetpub\wwwroot\DynamicsNAV90\WebClient.

• In the <system.webServer> element, add the following elements.

<rule name=”Redirect to HTTPS”>

I need your assistance,

Thanks

[admin1]

Hi,

Certificates is not the easiest part of installing NAV!

SSL certificates are used to “replace” the standard HTTP port 80 with the standard HTTPS port 443 - as long as you have followed the standard way of setting it up.

You cannot use port 8080 with HTTPS, it would be https://localhost:443/DynamicsNAV1 - but you don’t need to specify :443, as that’s implicit. The only reason you specify :8080, is because it’s not the default HTTP port.

Plus you would not be able to redirect 8080 to 8080, if that’s what you’re trying to do.

[Ayinde01]

These are what I have done with there result.

The desktop version is working likewise http://localhost:8080/dynamicsnav110/ but https://localhost:443/dynamicsnav110/ what I want to achieve, Thanks

[PalleA]

Your added screendumps are in a low quality so it is hard to see what you have done.

What does it say on your upper left corner when you click on the lock? (to see the certificate) - If there are not certificate added you can have three issues

Your CName in your certificate does not match your computername and/or your domain (localhost)

Your DNSIdentity is wrong compared to the name of your Certificate.

Your Certificate has not been installed on the computer as Trusted Root Certificate

Finally your second website (443)was it created with tht power(s)hell command New-NAVWebServerInstance ?

[Ayinde01]

I sincerely appreciate your replied.

1.) CName in my certificate = DESKTOP-T6U5FJC.NAV2018.local, Computer Name = DESKTOP-T6U5FJC.

2.) In the ClientUserConfig,

In the NavSetting.Json, “DnsIdentity”: “DESKTOP-T6U5FJC.NAV2018.local”

3.) Yes, show below

4.) I only created binding of 443 through IIS.

Please guide me on how to create it, Thanks

[DamjanZa]

Hi,

Please can you share with us Server Windows Logs from your NAV server instance, so that we can see what the issue is.

Read this on Certificate issuing and applying SSL connection settings.
https://help.lsnav80.lsretail.com/help/en/tskImplementSecurityCertificatesInProductionEnvironment.htm

https://saurav-nav.blogspot.com/2012/12/nav-2013-credential-type-how-to-use.html (it is for NAV2013, but SSL certificate setup is done the same way…ir relaly similar…

You will need to configure also IIS and make sure that you have installed all certificates and make sure thumbprint of SSL certificate is correctly inserted on NST (I think it cannot be copied, but manually typed in).

I have once written down all the steps for NAV2018, but I cannot find the PDF document:(

Thank you
BR Damjan

[DamjanZa]

Check this link

https://www.cloudfronts.com/login-windows-client-web-client-using-navuserpassword-authentication-microsoft-dynamics-nav/

[DamjanZa]

I found my NAVUserPassword and SSL certificate installation guide. Do you have any email address where I can send you the installation guide?
It’s was used at one of my clients, so I would like to send the user guide to you, not to post it here on the forum…

Thanks Damjan

[Ayinde01]

I appreciate your reply, below is the server instance

[Ayinde01]

Wow that is beautiful. Email Address: ibrahimwasiu2005@yahoo.com or wasiu.laplace@gmail.com

Thanks

[Ayinde01]

https://saurav-nav.blogspot.com/2012/12/nav-2013-credential-type-how-to-use.html is for desktop version not web version of Microsoft Dynamics NAV.

The desktop version is working perfectly except the web version

Thanks

[DamjanZa]

Hi,

I just sent an email with PDF file.
I believe you need to set Credential Type to NavUserPassword to use SSL Certificate authentication, but I am not 100% sure of this.
Just check the PDF file and make sure SSL settings are configured according to the settings in PDF file and try to open web client.

Thank you
BR Damjan

[DamjanZa]

open the web client and copy the error form event log of the client computer and the NAV server, if there are any.
WE need to see the full error on web client.

[PalleA]

I think you are pretty close to be there… In order to see the final step we need to get the error message that you are given - You can see that in the Event Log for the servicetier you are using.

If you are using two different servicetiers then it might be that the servicetier user is not added to the database. But again, lets see your event log error message.

[Ayinde01]

I appreciated your replied, I have done according to your guide, could it be because am using Username instead of NavUserPassword.

Thanks

[PalleA]

You should actually use NAVuserPassword - You bitmap is to small to see, and again we cannot help you further unless you present the event log error message.

[DamjanZa]

Hi,
Yes, set it to NavUserPassword, and make sure certificate thumbprint is inserted.

Make sure that user account that runs NST has full permissions on the imported SSL certificate(s).

1. On the server where your servicetier is (where NAS or NST is running) open Certificate Manager by windows key+R and type in certmgr.msc
2. navigate to imported SSL certificate(s) → right click on the certificate → All Tasks → Manage Private Keys
3. select user account that runs the service tier (NST) and enable full control (below printscreen is just for your reference).
   
4. Restart NST
5. open Web Client
   Perhaps you will have to restart IIS, too…

Thank you
BR Damjan

[Ayinde01]

[Ayinde01]

When it’s come to forget password, how can I treat it

Thanks

[PalleA]

What password? If you mean the user password then an admin can go ind Dynamics and look for USERS and choose change password.