SSL Management Utility

Prerequisites

• A full chain SSL or TLS certificate in PFX or PEM format.
  • PFX - The file must be in .pfx format and requires a password.
  • PEM - In most cases, a PEM certificate consists of two files: a private key file (.pem or .key) and a certificate file (.crt or .pem).
  Note: Make sure the SSL certificate chain is complete.
• To bind the SSL or TLS Certificate to a port served by AgilePoint NX Portal.

  For more information, refer to Configure SSL or TLS for AgilePoint NX Portal.

• AgilePoint NX PrivateCloud, or AgilePoint NX OnPremises v9.0 or higher.

Good to Know

• For security, AgilePoint recommends you use a standard SSL or TLS certificate, and not a self-signed certificate.
• SSL or TLS is required for AgilePoint Server if you use on-premises SharePoint over SSL or TLS.
• AgilePoint NX supports any version of SSL or TLS, but limitations to the versions of SSL or TLS you can use in your environnment may apply based on software or systems outside of AgilePoint NX. The following are examples of restrictions that may apply to the SSL or TLS versions that could apply in your environment. However, the specifc rules depend on your specific configuration:
  • AgilePoint Server relies on the version of SSL or TLS that is configured for .NET on your AgilePoint Server machine. For example, by default, .NET 4.7.1 supports TLS 1.2 or higher.

    This configuration can be changed, but any downgrade in the supported version of SSL or TLS can result in security risks. For more information, see the documentation from Microsoft.

  • Outside services, such as Salesforce, may require certificates with higher levels (or specific levels) of SSL or TLS.

    You can test your certificate with several third-party, web-based services—for example, https://www.digicert.com/help/

  • If you want to connect to mobile apps that use iOS 9 or higher, your certificate must use Apple's App Transport Security standard.

    For more information, refer to NSAppTransportSecurity from Apple.

• After you configure AgilePoint Server and AgilePoint NX Portal for SSL or TLS, you also must configure serveral other components if they are used in your environments.

  For more information, refer to:

  • Configure SSL or TLS for Analytics Center
  • Change the URL for Mobile Devices to use HTTPS
  • Configure AgilePoint NX to Connect With On-Premises SharePoint with HTTPS

How to Start

1. On the AgilePoint Server machine, open this folder:

   (NX Portal installation folder - v9.0 and higher) C:\Program Files\AgilePoint\AgilePointPortalInstance\tools\windows

2. Right-click the file AgilePoint.Portal.Management.exe, and click Run as Administrator.

Fields

Prerequisites

• The certificate must exist in this folder:

  (NX Portal installation folder - v9.0 and higher) C:\Program Files\AgilePoint\AgilePointPortalInstance\Certificates

• A thumbprint for the certificate.

  For more information, refer to Configure SSL or TLS for AgilePoint NX Portal.

Fields

Good to Know

• This action removes the association between the certificate and the port number. The certificate is not deleted from the folder path. The same certificate file can be applied to a different port.

Fields