iMIS version 15.1.2
In the installation documentation there is discussion about one model where the public views is at an external server and the application server and database server are inside the firewall. It is also described that you need to open up ports 1433, 443, and 80. We are having issues on one of our clients. In this scenario do you have to have an SSL certificate on the internal application server? Since the manual indicates that 443 has to be open it would make sense that you need to do that. In addition you would really want all traffic between the public views and the application server going over 443.
So the setup is as follows - public views on external server known as www.myassociation.org
Internal server on LAN inside of firewall publically known as imis.myassociation.org
the iMISWebServerURL is http://imis.myassociation.org/imis15 in the web.config
What we are seeing is that it needs to flip over to https://imis.myassociation.org/ which we would want it to do, so that means that we need to put a certificate on the internal applciation server. We tried a self signed SSL and that didn't cut it but now have purchased one that we are installing for the client. We need to wait until off hours but wanted to confirm from ASI if we could, and for the community if an SSL is required for the application server in this scenario.
Thanks,
Randy
Since you are passing
Since you are passing username and password information over the web to your application server you need to enable SSL certificate but this certificate can be self signed SSL certificate. Because user information’s are transferred via ASI membership web services internally, so there won’t be any warring message displayed from browser to end users to see,
Still you need public singed certificate for your public view