Switch a Creatio website from HTTP to HTTPS

Products
All Creatio products

The HTTPS protocol ensures secure connection between a client and a web service. Switching from HTTP to HTTPS is recommended to increase system security and enable additional services, such as WebRTC support in Webitel. Please note that this article refers only to on-site applications. To switch to HTTPS, you need to change several options of the website in IIS and edit the Web.config file. Creatio cloud uses secure connection by default.

Note. You will not be able to use the advantages of HTTPS if Creatio application is deployed on Windows Server 2008.

IIS setup 

Before configuring HTTPS, do the following:

  • Obtain a digital certificate from the certification center in PFX format;

Note. If you are using a self-signed certificate, Creatio mobile application will not be able to connect to the Creatio site due to the security policies of mobile applications.

  • Set up websockets for the correct operation of all system components;

  • Additionally, check the list of installed IIS components to avoid errors during Creatio setup and operation.

The received digital certificate must be loaded into the server certificate storage:

  1. Open Internet Information Services (IIS) Manager.

  2. In the main IIS window, double-click the Server Certificates detail (Fig. 1).

    Fig. 1 Selecting the Server Certificates detail
    scr_chapter_setup_http_wnd_iis_server_certificates.png
  3. In the Server Certificates window, click the import link in the action menu to the right (Fig. 2).

    Fig. 2 Opening the Import window
    scr_chapter_setup_http_wnd_iis_import_link.png
  4. In the import dialog box, specify:

    1. Path to the import file hosted on the server

    2. Password (if required)

    3. Certificate storage (Fig. 3)

      Fig. 3 Certificate import window
      scr_chapter_setup_http_wnd_import_certificate.png
  5. Click OK to import the certificate.

Next, connect the imported certificate to the Creatio application:

  1. In the IIS window, go to the application website by clicking its name in the left Connections menu (Fig. 4).

    Fig. 4 Selecting the Creatio website in the IIS window
    scr_chapter_setup_http_wnd_iis_site_select.png
  2. Click the Bindings link in the action menu (Fig. 5).

    Fig. 5 Selecting website bindings
    scr_chapter_setup_http_wnd_iis_site_bindings_link.png
  3. In the website bindings menu, click Add and add a new binding. In the Add Site Binding window, specify:

    1. Type "https "

    2. Website address

    3. SSL certificate (Fig. 6).

      Fig. 6 Binding a certificate to the Creatio website
      scr_chapter_setup_http_wnd_site_binding.png
  4. Click OK to confirm the settings.

    Now the certificate is successfully bound to the web application.

Web.config setup 

After adding the certificate, you need to make changes to the Web.config configuration file, located in the root directory of the Creatio website.

  1. At the end of the file, find:

    <behaviors configSource="Terrasoft.WebApp\ServiceModel\http\behaviors.config" />
    <bindings configSource="Terrasoft.WebApp\ServiceModel\http\bindings.config" />
  2. Change paths from “http” to “https”:

    <behaviors configSource="Terrasoft.WebApp\ServiceModel\https\behaviors.config" />
    <bindings configSource="Terrasoft.WebApp\ServiceModel\https\bindings.config" />

Edit the Web.config file located in the Path to the root website directory\Terrasoft.WebApp\ directory.

  1. Set the variable value to encrypted="true". The configuration differs depending on the operating system of the server with Creatio application.

    For Windows Server 2012 and higher, the configuration string should look as follows:

    <wsService
     type="Terrasoft.Messaging.MicrosoftWSService.MicrosoftWSService,
     Terrasoft.Messaging.MicrosoftWSService" encrypted="true"
     portForClientConnection="443" maxConnectionNumber="100"
     clearIdleSession="false" clearIdleSessionInterval="120" />
  2. At the end of the file, find:

    <services configSource="ServiceModel\http\services.config" />
  3. Change the path from “http” to “https”:

    <services configSource="ServiceModel\https\services.config" />

Save the configuration files.

Restart the application in the IIS and then go to your Creatio website. If all is done right, then in the address bar you will see "https://" before the web address of the application.