# Configuring HTTPS with SSL Certificate

Follow these steps to use an SSL certificate for secure browsing (HTTPS) in a standalone CLIMS setup.

# Enabling SSL in IIS

1. Open the Internet Information Services (IIS) Manager.

2. Under the Connections pane, expand the root node and Sites.

   

   IIS: Home
   
   

3. Click Open iT CLIMS Server.

   

   IIS: Open iT CLIMS Server
   
   

4. Under the Actions pane, in Edit Site, select Bindings....

   

   IIS: Edit Site
   
   

5. In the Site Bindings dialog box, click Add.

   

   IIS: Site Bindings
   
   

6. In the Add Site Binding dialog box:

   1. In Type, select https.
   2. In Host name, type in the preferred hostname.
   3. In SSL certificate, select the appropriate certificate.
   4. Specify other details as needed.
   5. Click OK.

   

   IIS: Add Site Binding
   
   

7. Click Close.

   

   IIS: Updated Site Bindings
   
   

# Updating the Configuration Files

1. Go to the Auth folder, which is C:\Program Files\OpeniT\Zero\Auth by default.

2. Create a copy of appsettings.json and rename the duplicate file to appsettings.Override.json.

   Open the existing appsettings.Override.json, if there is already one.

3. In the override file, change the BaseUri to the registered website URL (e.g., https://climstest.openit.cloud).

   appsettings.Override.json

   ...
   16 |    "IdentityServer": {
   17 |        "Clients": [
   18 |            {
   19 |                "Enabled": true,
   20 |                "ClientId": "abcdabcd-a111-2222-3333-abcdefabcde",
   21 |                "ClientName": "CLIMS",
   ...
   46 |                ],
   47 |                "BaseUri": "https://climstest.openit.cloud",
   ...

4. Save the file.

5. Go to the Configuration folder, which is C:\Program Files\OpeniT\Zero\Configuration by default.

6. Create a copy of Authentication.json and rename the duplicate file to Authentication.Override.json.

   Open the existing Authentication.Override.json, if there is already one.

7. In the override file, change the URL values of Authority, RedirectUrl, and SilentRedirectUrl to the registered website URL (e.g., https://climstest.openit.cloud).

   Make sure to add /Auth after the Authority URL and /signin-oidc after the RedirectUrl and SilentRedirectUrl.

   Authentication.Override.json

   1 | {
   2 |     "AuthenticationMethod": "Oidc",
   3 |     "Oidc": {
   4 |         "Authority": "https://climstest.openit.cloud/Auth",
   5 |         "ClientId": "abcdabcd-a111-2222-3333-abcdefabcde",
   6 |         "ClientSecret": "abcdabcd-a111-2222-3333-abcdefabcde",
   7 |         "RedirectUrl": "https://climstest.openit.cloud/signin-oidc",
   8 |         "SilentRedirectUrl": "https://climstest.openit.cloud/signin-oidc",
   ...

8. Save the file.