Securing with certificates¶

Introduction¶

This is a very rough guide. For more details, there is a lot of help material provided by Microsoft.

Install IIS Client Certificate Mapping feature¶

To use the certificate mapping the feature needs to be installed.

Configuring Web Page for REST-API¶

To enable certificate mapping the REST-API needs to be installed in its own web site. This is necessary because all authentication methods need to be disabled. The TcPCM rich client is using a SOAP based interface (Windows Communication Foundation) that needs anonymous authentication on the IIS level. Because the soap interface is checking for certificates on a deeper level.

SSL Settings¶

Disable all authentication methods¶

Enable certificate mapping¶

After disabling all authentication methods the certificate mapping needs to be enabled in the configuration editor.

Community

Connect and Collaborate with Industrial Professionals and Join the Community!