Redirect Rule in IIS for HTTP to HTTPS

[goody612]

Has anyone done this successfully for the data platform sites?

[JohnSorensenDK]

@goody612  Would you please elaborate on what you're trying to achieve by the IIS redirection?

[goody612]

The customer is wanting to add a redirect rule so that when a customer attempts to access the system via HTTP it will redirect to HTTPS. We first attempted to add it at the Default Site level, which generated errors. We then added it to the admin and user console sites, and that worked fine. When trying to add it to the api site we get the same errors as when it was set on the default site level. Maybe it doesn't need to be set on the api site, just seeing if anyone else has done anything similar.

[JohnSorensenDK]

@goody612 

I'm sorry about the delay in coming back on this thread...

I asked internally and got the response that you cannot enforce https if that is what you are trying to do as you've also seemed to experience.

Thanks,

[jasonlu · Accepted solution]

John, et al,

I'm not sure about redirecting http to https, but for Data Platform it is possible to force the system to use https only.

1) get some certificates and bind https to the default site on the Data Server and User Console server.

2) unbind http from the Data Server and User Console server

3) run through the configuration wizards

Step 2) is important, as the hotlinks inside the data server console to the user console will still use http if you don't do this. I think if you still had http bound and had this redirect working, you would have this problem. 

j

[JohnSorensenDK]

@jasonlu 

Thanks for confirming this, but does this also then work for the Data Platform API's that was asked for here?

[jasonlu]

John,

considering the binding is done at the web server's 'site' level, then that would also apply to 'bdna-api' on the Data server.

j

[taboudreau]

This is covered in the User Console Install Guide actually. In the 5.5 version its on page 47. The item marked as a solution covers most of the steps but misses the small changes needed to a NBI.configuration.config file.