How to configure a self-signed SSL certificate with Ektron

  • Updated

This article shows you how to configure a self-signed certificate to test the Workarea in SSL or troubleshoot an SSL issue. A self-signed certificate can help you find a feature that works in HTTP, but not HTTPS.

The following linked article outlines the steps to create a self-signed certificate:
http://technet.microsoft.com/en-us/library/cc753127(v=ws.10).aspx

After you create the self-signed certificate, add the certificate to your site bindings as follows.

  1. Choose your site in the connections section.
  2. Click Bindings in the actions pane.
  3. Click Add in the bindings window.
  4. Change the type to https .
  5. Open the dropdown, select your certificate, and click View .
    Note the URL in the 'Issued to:' field in the View window. 

    ssl binding

  6. Add a new URL in your host file with that URL specified in the last step. 
    127.0.0.1 machinename
  7. Open the siteroot /web.config file.
  8. Find these settings.
  9. <add key="ek_UseSSL" value="false"></add>
<add key="ek_SSL_Port" value="443"></add>
  10. Set ek_UseSSL to true .

    WARNING! If you did not install the certificate to the Web server and set ek_UseSSL is true , you cannot log into Ektron. Make sure you installed the certificate before setting this to true.

  11. Set the ek_SSL_Port to 443 (unless you specified another SSL port).
  12. Edit the <wsHttpBinding>/<security>  element so it looks like this:

  13. <security mode="Transport">
  <transport clientcredentialtype="None"
             proxyCredentialType="None" realm="">
  </transport>
</security>
  14. Save and close the file.
  15. Browse to the site using the URL noted in step 5. Be sure to prepend it with 'https://'.
  16. Confirm that the site comes up without any errors from the browser. If you have to add an exception to your browser the certificate was not configured correctly or an incorrect URL was used.