Enabling a secure HTTPS connection - To secure the connection between the proxy service and the AMAG Symmetry XML Open Integration server, you must enable the use of HTTPS. - AMAG Symmetry 3.3 - Plugin and extension guides

To secure the connection between the proxy service and the AMAG Symmetry XML Open Integration server, you must enable the use of HTTPS.

To enable a secure HTTPS connection from the AMAG Symmetry server:

1. On the AMAG Symmetry server, open Windows Internet Information Services (IIS) Manager.
2. If one doesn’t already exist, add an HTTPS binding.
   1. In the left-side Navigation pane, right-click Default Web Site > Edit site > Bindings.
   2. In the Site Bindings window, click Add.
   3. Add a new binding with the following information:

      Type

      HTTPS

      IP address

      Enter the IP address of your server.

      Port

      443

      Host name

      Enter the host name of your AMAG Symmetry server.

      SSL certificate

      Choose the certificate that matches your host name.

3. Click OK.
4. Navigate to C:\inetpub\wwwroot\smsXMLWebService and back up the web.config file.
5. Edit the web.config file as follows:
   1. In the Configuration section, navigate to service.model > bindings > weHttpBinding > security and change the security mode to TransportWithMessageCredential.
      <security mode="TransportWithMessageCredential">

      IMPORTANT: This setting must match the configuration done in step 2b of the To enable a secure HTTPS connection from the proxy service section.
   2. In the Configuration section, navigate to service.model > services > host > baseAddresses > add and change the baseAddress to use HTTPS.
   3. In the Configuration section, navigate to service.model > behaviors > serviceBehaviors > serviceMetadata and change the httpsGetEnabled value to True
   4. In the Configuration section, navigate to service.model > services > service > endpoint and change the binding to mexHttpsBinding
      <endpoint address="mex" binding="mexHttpsBinding" contract="IMetadataExchange" />

6. Right-click Default Web Site > Manage Web Site > Restart to restart IIS.

To enable a secure HTTPS connection from the proxy service

1. From C:\Program Files (x86)\Genetec\Symmetry Proxy Service, open the Genetec.Plugins.Amag.Symmetry.ProxyService.exe.config file.
2. Edit the file as follows:
   1. Change the SymmetryApiPort to 443 to match the one in IIS.
   2. Change the <security mode="Message"> value to TransportWithMessageCredential.
      <security mode="TransportWithMessageCredential">

      IMPORTANT: This setting must match the configuration done in step 4a of the To enable a secure HTTPS connection from the AMAG Symmetry server section.
3. Restart the proxy service.
4. Open the Amag Symmetry Proxy Configuration Page.
5. Select the Use https checkbox.
6. Change the Host address to match the baseAddress configured in IIS.