Service Manager

Setting Up the Gateway Proxy Server with SSL

Use the following process when you need to use a secure proxy server. You must have an SSL certificate installed prior to creating the new binding. A self-signed certificate may work for testing purposes.

Do the following to ensure that the server works as expected:

1.Open a browser window and paste in the following URL where Disco_Server_I_Port_Name is the IP address or name of the server where Discovery is installed. This should be the same as the base URL (for the tenant) in the Service Manager configuration database: http://Disco_Server_/_Port_Name/AgentTaskWs/AgentTaskWS.asmx.

2.Press Enter to ensure that you receive the proper response.

You should see an AgentTaskWebService window that confirms that the get client tasks and get client update agent tasks are supported.

Do the following to ensure that the proxy server redirects traffic correctly:

1. Replace the IP address with the URL of the gateway and add port 8097 as seen in the following example: http://Gateway_I_Port_Name:8097/AgentTaskWs/AgentTaskWS.asmx. You should receive the same response from the agent task web service.

2.If both URLs are working correctly, change the binding of the proxy to use SSL and port 443.

Do the following to set SSL and port 443:

1.On the gateway server, open Computer Management > Services and Applications > IIS.

2.Right-click GatewayProxy and select Edit Bindings.... You should see only one binding configured with HTTP and port 8097.

3.Click Add... and create a new HTTPS binding with port 443.

4.Select the SSL certificate that you installed.

5.Repeat the proxy server test seen above, this time using HTTPS instead of HTTP, and port 443 instead of 8097, to ensure that you receive the same responses. You may need to reset Microsoft IIS first.