contentACCESS documentation version 3.1 with service pack2

Most of the companies understood, that sensitive information/data should be transmitted using a secure connection. TECH-ARROW also reacted on this demand and offers a secure connection, i.e. HTTPS connection to enable communication between the user and the contentACCESS server. To enable to use HTTPS security, it is required to install a proxy server, which will enable for the user to communicate with the contentACCESS server. The contentACCESS Proxy is available between the contentACCESS components, in the contentACCESS setup package.

Note: Hyper Text Transfer Protocol Secure (HTTPS) is the secure version of HTTP the protocol over which data are sent between client (as in our case the Outlook form) and the contentACCESS server that you are connected to. The “S” at the end of HTTPS stands for “Secure”. It means all communications between the client and the server are encrypted. HTTPS is often used to protect highly confidential online transactions. HTTPS pages use one of two secure protocols to encrypt communications – SSL (Secure Socket Layer) or TSL (Transport Layer Security)(proxy that we will install uses SSL). Both of these protocols use what is known as asymmetric Public Key infrastucture (PKI) system. This PKI system uses two “keys” to encrypt communications, a “public key”, and a “private key”. Anything encrypted by the public key can only be decrypted by the private key and vica-versa.

How to allow HTTPS secure connection between the proxy server and the contentACCESS in case of need?

The contentACCESS setup package cannot configure the contentACCESS Proxy to use https on the Internet Information Services (IIS), therefore this must be set manually. It is also necessary to mention, that the proxy server must be installed with the “https” connection from the contentACCESS package, otherwise it is not possible to establish HTTPS connection between the proxy server and contentACCESS.

Once the contentACCESS Proxy is installed, continue according to the next steps:

1. Open Internet Information Services (IIS) Manager on the computer where the proxy server is installed.
2. Import the company’s SSL Certificate

a. Click on the server name – “TANEWS (TANEWS\Administrator)” in our case – and under section IIS double click on Server Certificates:

b. Import the certificate. In the right hand corner of the Actions pane click on Import and in the Import certificate window browse for the company’s certificate, open it, then enter the password to it and click on OK:

c. Bindings configuration. Now enable the access to the proxy from HTTPS. Search for the node contentACCESSWS in the Connections pane. Double click on the Default Web Site in the pane, and in the right upper corner of the Actions pane click on Bindings option.

In the Site Bindings window, click on Add. In the Add site binding window, under Type select “https” from the dropdown list, enter the Host name and select the SSL certificate from the dropdown list. Then click on OK.

Cancellation of HTTP-allowance:

1. If you would not like to allow using HTTP connection any more, unfold the appropriate site in the Connections pane and click on the proxy (contentACCESSWS), then double click on SSL Settings option under IIS section (Screenshot A). The SSL Settings page will open. Here check checkbox Require SSL (Screenshot B).
   




2. In the right hand corner click on Apply to save these changes.
   
   
   

   To check, if the communication between the proxy and the contentACCESS is well established. Into the browser enter URL:
   https://[HostName]/contentACCESSWS/MobilityService.svc/ping.
   If the connection was well established, then the ping result will show OK.