How to configure HTTPS on the ENow webserver

Purpose

This article explains how to configure the ENow web server to use HTTPS. HTTPS may be used exclusively, or in addition to HTTP.

Prerequisites

The ENow web server needs a certificate installed. A certificate may be purchased from an external provider or created internally, depending on the requirements of your network.

If you purchased the certificate externally, follow the provider's instructions for installing it. If you are creating a self-signed certificate, use your standard internal process for issuing and binding one on Windows Server — the steps below assume the certificate is already installed on the server and available to IIS.

Procedure

1. On the ENow web server, open IIS Manager, expand Sites, and select the Mailscape site.
2. In the right pane under Actions, click Bindings.
   
3. Click Add.
   
4. From the drop-down choose HTTPS, select the newly installed certificate, and click OK.
5. Verify that https / 443 now appears in the bindings list, then click Close.
   
6. With the Mailscape site still selected, in the middle pane under IIS, double-click SSL Settings.
   
7. Select Require SSL, set Client certificates to Ignore, then click Apply.
   
8. With the Mailscape site still selected, under Management, double-click Configuration Editor.
   
9. Click the section drop-down at the top of the window, expand system.webServer, then double-click serverRuntime.
   
10. Change uploadReadAheadSize to 2147483647 and click Apply.
    

This completes the web server configuration — it is now reachable over HTTPS. To make the clients communicate with it over HTTPS as well, continue with the steps below.

Point the clients at HTTPS

1. On each web server or Domain Controller, navigate to the following path, replacing C: with the drive you installed on if it is not the default:

   C:\Program Files (x86)\ENow\Mailscape Agent

2. Right-click MailscapeAgent.config and open it with Notepad. Scroll roughly three quarters of the way down until you see the URL of the ENow web server. It looks like this:

   http://<your-web-server>:20080/MailscapeWeb

3. Change that line to your new HTTPS URL. Note that the port is dropped, because HTTPS uses 443 by default:

   https://<your-web-server>/MailscapeWeb

4. Save the file. If you cannot save directly to that location, save it to the desktop and then copy it over the original.
5. Open the ENow OneLook Dashboard and confirm the first Exchange Server or Domain Controller you changed is checking in and its dashboard indicators are green.
6. Repeat for the remaining clients.

Change one client first and confirm it checks in before updating the rest. If the HTTPS binding or certificate is not right, a single client tells you that immediately, whereas changing them all at once takes the whole estate offline.

Applies to

EMS version 7.12 CU3 Hotfix 1 (7.12.3.6858) and later. Earlier versions may be affected as well.