Skip to main content

Running TIM Enterprise over SSL/HTTPS

To configure TIM Enterprise to run over HTTPS (HTTP over SSL), you'll need a valid SSL certificate issued by a trusted certificate authority (CA). The certificate should be in PKCS#12 format (usually with a ".pfx" extension) and include the private key. To apply the certificate to TIM Enterprise, follow the steps below.

Prerequisites​

This guide presumes you have already installed your (valid) SSL certificate into the MY certificate store using the Local Machine account, since TIM Enterprise runs as a system service in that context. You will need your certificate file as well as the password for it.

Installing the certificate to the MMC certificate store​

  1. Install the certificate by double-clicking on the certificate. This will open the certificate import wizard.

  2. Now we need to select where you would like the certificate stored. Since TIM Enterprise is a system application, it will need to be installed to the "Local Machine".

    Certificate Import step 1

  3. Click Next to continue; Windows UAC may pop up, in which case, press "Yes" to continue.

  4. The wizard will now ask you which file you would like to import. As we’ve double-clicked on the file, this should contain the location of the .pfx we initially double-clicked on. Note: If this isn’t correct, please click "Next" and browse to the certificate you want to import.

    Certificate Import step 1

  5. The wizard will now prompt you to enter the password for the Private Key contained within the certificate. Enter your password and click "Next". If the password is valid, it will allow you to continue with the import of the certificate.

    Certificate Import step 1

  6. The wizard will now prompt you to select where you'd like to install the certificate. The certificate needs to be installed to the "Personal" store. Select this and press "Next" to continue.

    Certificate Import step 1

  7. The final stage of the wizard is a summary of the import. Click "Finish" and the certificate will be imported into the Local Certificate store. The wizard will inform you of a successful import.

Checking the Local Certificate store for the imported certificate​

  1. Press the Windows key + R to launch the Run dialog. Enter mmc.exe and click "OK". Choose "Yes" if the UAC box requests authorisation.

    Certificate Import step 1

  2. The Management Console will appear. From here, add a new snap-in by clicking on "File", then choosing "Add or Remove Snap-in", then "Certificates", then "Add".

  3. You'll then be asked to select which snap-in you'd like the manage. Select "Certificates", then press "Add".

    Certificate Import step 1

  4. When asked which account you want to manage, choose "Computer account", then press "Next".

    Certificate Import step 1

  5. Select "Local Computer (the computer this console is running on)" and click "Finish".

    Certificate Import step 1

  6. In the "Add or Remove Snap-ins" window, within the "Snap-ins" panel, select "Console Root > Certificates (Local Computer)", and click "OK".

    Certificate Import step 1

  7. Within the Console window, expand the "Console Root" folder, expand "Certificates (Local Computer)". Expand "Personal", then "Certificates". In the right-hand pane, you should now see the certificate you imported.

    Certificate Import step 1

Configuring your certificate in TIM Enterprise​

  1. Log in to TIM Enterprise using the root account from a web browser running on the same machine as TIM Enterprise. If you do not know your root password, please contact your vendor's Technical Support team. After successfully logging in as root, you'll see a panel entitled "Web server", where we will configure your web server settings.

  2. Ensure the correct web server port is selected; HTTPS typically uses port 443.

  3. Select the security protocol to be used. For maximum compatibility, select "HTTPS (Automatic)" here. If your organisation has specific requirements, you may select other security protocols, such as SSL2, SSL3, TLS1.2, etc.

  4. In the "Server certificate" drop-down box, select your newly-installed certificate.

  5. Click "Test settings" in the top right of the "Web server" panel to check if your certificate was installed successfully. If it was, the button briefly turns green.

  6. Save your new settings by clicking on the "Save settings" button in the top right hand corner of the page.