Any way to force HTTPS instead of HTTP?

[Brian_Day]

Can the client be configured to use HTTPS instead of HTTP? I've got some customers with sensitive healthcare data which should be locked down in accordance to our internal policies.

Thanks.

[TonySterling]

You can use this in the Enterprise Vault webapp URL setting:

<https>/enterprisevault

[Brian_Day]

---

@Tony Sterling wrote:

You can use this in the Enterprise Vault webapp URL setting:

/enterprisevault

---

Hey there, Tony.


So if I slap some certs on the internal servers, configure IIS to "require HTTPS", and make that one setting it should in theory move everything to HTTPS? Right now our Web Application URL is blank.

[TonySterling]

After you add your certs and make your changes to IIS, change the WebApp url to be <HTTPS>/enterprisevault run a synchronization of all the mailboxes.

This should update the clients to use https instead of standard http.

That should do it.

Regards,

Message Edited by Tony Sterling on 04-07-2008 01:36 PM

[TonySterling]

I just re-read your post and is says your WebApp url is blank.   That doesn't seem right.

Also, I read the help dialouge from that Site Properties page and it says the following:

If you change this setting, the change does not take effect until the next run of the Exchange Mailbox Task, either normally or in Report Mode.

so looks like you would need to run the task in report mode.

[Brian_Day]

Very good, we'll get some certs generated and see how this goes. Thanks for the quick answer!

[Brian_Day]

---

@Tony Sterling wrote:

I just re-read your post and is says your WebApp url is blank.   That doesn't seem right.

---

Yup, been blank ever since v6.5 in 10/2006.

[TonySterling]

Are you looking at the Site Property or at the Exchange Mailbox Policy > Advanced Tab > Outlook settings?

regards,

[Brian_Day]

---

@Tony Sterling wrote:

Are you looking at the Site Property or at the Exchange Mailbox Policy > Advanced Tab > Outlook settings?

regards,

---

Mailbox policies. I totally forgot it is in the site properties too, where it is in fact /EnterpriseVault. Should I set the https version at the site level?

[TonySterling · Accepted solution]

;)

Yes, you want to set it at the site level.

Cheers,

[GeorgeM]

Hello,

I was also enable HTTPS and import a test certificate in IIS on EV server.

Unfortunatelly, when I tried to open an archived email appears the following error:

"Could not show this item. please try again;if it is failed, contact your ev admin.

The certificate Authority that generated the server's certificate is not recognized. "

When I tried to search from Ev search button then a microsoft security alert appeared says "certificate authority...,certificate expired...., invalid name certificate...."and if you choose Yes, everything works Ok.

I believe that everything happened because the certificate that we created was incorrect. what do you thing?

thanks

george

[MichelZ]

Either this, or you do not trust the CA that generated the Certificate.

Cheers

Michel