Enabling https for ndMirror

Follow

Updated:

Before installation, make sure you have your own SSL certificate.

On the computer with ndMirror installed:

  1. Import your SSL certificate into the Local Machine certificate store. See How to import SSL certificate.
  1. Copy thumbprint value from the Details tab.

thumbprint.png

  1. Stop ndMirror service.
  2. In the ServiceSettings database table, update DashboardUri key: substitute HTTP part with HTTPS.

dreer.png

  1. Start a Command Prompt as an Administrator.
  2. Check if DashboardUri value exists in your reserved URLs using netsh http show urlacl command.

mceclip0.png

  1. Delete an old URL reservation.

Command example: netsh http delete urlacl url=http://+:9090/

  1. Check your ndMirror service user name.

sk.png

  1. Add a new URL reservation.

Command example: netsh http add urlacl url=https://+:9090/ user=sk

  1. Add the SSL certificate.

Command example: netsh http add sslcert ipport=0.0.0.0:9090 certhash=‎ 9adc85a361a4bef106327d5d37e90ffa02b6ac2c appid={8e99c393-4403-434f-9e42-7ca1a237c893}

Note: The appid is a random GUID that can be generated using PowerShell or any other tool.

If the following error appears please make sure that you’ve imported the certificate into the Local Machine certificate store:

SSL Certificate add failed, Error: 1312
A specified logon session does not exist. It may already have been terminated.

  1. Start ndMirror service, and open Dashboard using the new URL.

Important: Before updating or uninstalling ndMirror, URL reservation and SSL certificate binding should be deleted manually.

Commands example:

netsh http delete sslcert ipport=0.0.0.0:9090

netsh http delete urlacl url=https://+:9090/

Commands summary:

netsh http delete urlacl url=http://+:9090/

netsh http add urlacl url=https://+:9090/ user=sk

netsh http add sslcert ipport=0.0.0.0:9090 certhash=‎9adc85a361a4bef106327d5d37e90ffa02b6ac2c appid={8e99c393-4403-434f-9e42-7ca1a237c893}

 

Useful links:

Import and Export Certificate - Microsoft Windows

Netsh http commands

add sslcert

Nancyfx self hosting over HTTPS 

Back to Top

Was this article helpful?
0 out of 0 found this helpful
Powered by Zendesk