HTTPS Setup

When upgrading CloudM Migrate, IIS will be reset to its default configuration. You should re-apply any custom configurations you have made to the http://cloudmigrator.local site after an upgrade or reinstallation. Most commonly, this will affect SSL bindings to public facing URLs.

Additional steps are required to setup HTTPs in IIS when authenticating with Box to use OAuth2.

Automatically configure using a Powershell Script

The attached Powershell script will automatically create a certificate and HTTPS bindings for cloudmigrator.local. To run the script:

1. Download the script onto your primary server.
2. Open PowerShell or PowerShell ISE as an administrator on your primary server (right-click More>Run as administrator).
3. Navigate to the directory you downloaded the script.
4. Run the script by typing '.\BoxCert.ps1' or in ISE by File>Open and run the script with F5 or the green Run Script arrow.
5. You can verify that the script has executed successfully by opening IIS and right clicking on 'HOSTNAME/Sites/cloudmigrator.local/Edit Bindings...'. You should see a second entry with type 'https'.
   • If the certificate was successfully created but it did not Bind correctly to https port (443), manually go into the IIS Manager and Bind it following the procedure outlined in Step 4 under the "Generate a Self Signed Certificate with the Correct Common Name" section.

If you get an error about the file not being digitally signed then you will need to change the Execution Policy by running Set-ExecutionPolicy -ExecutionPolicy Bypass in Powershell first

Manually configure

If you cannot use the Powershell script, or prefer to manually configure the setting, please follow the instructions based on a Windows 2008 server on finding the IIS Site ID and generating and adding the Self-Signed certificate below.

IIS Site ID

1. Click 'Start'.

2. In the 'Start Search' box, type 'inetmgr' and press ENTER.

3. Double click on your server name to expand.
4. Click on 'Sites'.
   
   Make a note of the 'ID' of the site. 

Generate a Self Signed Certificate with the Correct Common Name

1. Click 'Start'.

2. In the 'Start Search' box, type 'SelfSSL' and press ENTER.

3. Run the following command /S:2 is the 'ID' of your site in IIS from step 4. /P:443 is the default port for HTTPS.

   SelfSSL /N:CN=cloudmigrator.local /V:1000 /S:2 /P:443 /T /K:204 

   
   

4. In IIS right click on 'cloudmigrator.local' and select click 'Edit Bindings...'
   • Select 'https' and click 'Edit'
     

Add the Self Signed Certificate to Trusted Root Certificate Authorities