Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Info

In this step-by-step example we use self signed certificate. However, it is recommended to use a certificate that is issued by a Certificate Authority (CA).

Tip

Enabeling HTTPS also enables for Encore will enable the 'copy profile from clipboard' functionalities feature in Blueriq Encore.

Option 1: Enable HTTPS in

...

Internet Information Services (IIS)

  1. Go to Internet Information Services (IIS) Manager. 
  2. Select the Blueriq site and from the context menu, open the Bindings... dialog:


  3. Add a new binding with type 'HTTPS' and select the certificate you want to use. 


  4. Click on 'View' to check the 'Issued to' property of the certificate.  In a real situation, the 'Issued to' field should be the host of your Blueriq deployment instead of localhost:


  5. Now select OK in both the 'Certificate' and 'Add Site Binding' dialog.
  6. It is recommended but not required to remove any site binding of type 'HTTP' from the list of site bindings.
  7. To use HTTPS, go to the 'Issued to' host from step 4, using the https scheme. In this example, that is https://localhost/
    1. The URL for user management in Keycloak will be: https://localhost/Keycloak/admin/master/console/#/BlueriqStudio17 for Blueriq 17

Establishing a connection from the development dashboard to the Studio server

Now that the URL of the managment service has changed, the blueriq.studio.url property needs to be updated in the application-development-tools.properties file in the conf folder of the runtime.

...

  1. use https://localhost/Studio/Server/Services/ManagementService
    Info

    If you are using a self signed certificate, you will have to add this certificate to the jave java truststore as explained here: Security: HTTPS [editor]

  2. use the internal port if the runtime is deployed on the same server as the Studio server (http://localhost:17093/Services/ManagementService for Blueriq 17)

...

Instead of changing the settings in the default IIS instance to enable HTTPS, you could use run Blueriq behind a reverse proxy server.Please refer to these page to configure the Runtime

In this case, both the runtime and Keycloak require additional configuration which is described on these pages:

...