Using HTTPS for Recording Service
You can use HTTPS to secure data transferred between the application components and the client’s browser.
To configure HTTPS, you need SSL certificates for Timeline and Recording Service. You can choose one of the following options:
- Use SSL certificate issued by the Certification Authority (CA).
This is the recommended approach for the application installation that is intended for a production environment. The connection to the server will be secure and users will not get any warnings from the browser. - Use a self-signed SSL certificate.
If you do not have a signed certificate or if you only require a certificate for testing purposes, use a self-signed SSL certificate. However, in this case users will get warnings from the web browser about the use of a self-signed certificate as the server will not be considered secure.
If you install the program in a production environment, it is strongly recommended to use HTTPS with a CA certificate and a highly discouraged HTTP or self-signed SSL certificate.
How to set up HTTPS for Recording Service while installation
Below is a general sequence of steps necessary for setting up HTTPS for Recording Service during the installation process.
Important. Recording Service does not accept self-signed SSL certificates.
- Obtain an SSL certificate.
The SSL certificate should be installed in Microsoft IIS on the server you plan to install Recording Service. - Run the ABBYY.RecordingService.<version>.exe file and follow the on-screen instructions in the Installation Wizard. For more information see Installing Recording Service.
During the Destination Folder step: - Choose Use HTTPS.
- Select the SSL certificate from the list.
You can find the thumbprint of your certificate in the Internet Information Services (IIS) Manager: - In Connections, select the server name (host).
- Open Server Certificates.
- Open your certificate details and find Thumbprint.
- Setup a network connection for Recording Service. For more information, see Network Connection Settings.
- In Windows Firewall, open the rules for inbound Recording Service connections.
- Add a TCP/IP port specified during the installation process to the exception list.
For example, 443 port. - Check whether HTTPS is functioning properly
To make sure that HTTPS is functioning properly, open a browser on any computer and enter the following into the navigation bar:
https://{url}:{port}
where:
{url} is the name of the Recording Service website.
{port} is the port assigned to the Recording Service website during the installation process. For example, 443.
How to switch from HTTP to HTTPS without reinstalling Recording Service
If you did not configure HTTPS when installing Recording Service, you can do it later using IIS Manager:
- Select RecordingService site in the Connections panel.
- Click Bindings… in the Action panel.
- In the Site Bindings windows click Add.
The Add Site Binding windows will open. - Select HTTPS type and provide an SSL certificate issued to the site URL.
- Restart the site.
9/5/2024 4:23:54 PM