Note: Make sure that you enable and configure proper
certificate revocation, such as Online Certificate Status Protocol (OCSP) stapling. For
more information about OCSP configuration refer to https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-ocsp/5792b4c4-c6ba-439a-9c2a-52867d12fb66.
To implement SSL security for the Metasys Advanced Reporting System:
- Generate a certificate request and install the certificate.
For more information on these steps, see the following address:
http://technet.microsoft.com/en-us/library/cc771438(WS.10).aspx
- Configure the Metasys software to use
HTTPS (SSL) and HTTP protocols on the computer where you plan to install the
reporting system.
- In Control Panel, select System and Security, then Administrative Tools. On Administrative Tools, double-click Internet Information Services (IIS) Manager.
- In the tree in the left pane, browse to and expand Sites or Web Sites.
- In the right pane, right-click Default Web Site and select Edit Bindings. The Site Bindings box appears.
- Click Edit. Verify that the SSL port field contains 443 (Figure 1). Note: Port 80 must be open on the ADX for communication from other system devices. Verify that the TCP port entry is 80.Figure 1. SSL Port Field: 443
- Click OK.
- Close the IIS Manager window.
- Install the ADX software with Metasys Reporting.
- Using Windows Explorer, browse to:
C:\Program Files (x86)\Johnson Controls\MetasysIII\UI\com\jci\framework
- Using a text editor, open frameworkproperties.properties.
- Update the
advancedReportingURL setting line to use https:
instead of http: so it
appears like the following:
advancedReportingURL=https://SERVERNAME/MetasysReports
- Save the file.
- Using Windows
Explorer, browse to:
C:\Program Files (x86)\Johnson Controls\MetasysReports
- Using a text editor, open services.config.
- Delete the comment
tags from the file. Comment markers appear as
<!-- and -->
(Figure 2).Note: Do not delete the text between the comment tags. Delete all three sets of comment tags that appear in the file.Figure 2. Comment Tags - Save the file.
- Close all Windows Explorer windows.
- On the Start menu, in the Run text box, type regedit.
- Click OK. The Registry Editor window appears.
- In the tree on the left, browse to > > > > .
- On the right side of the screen, double-click SSRSWebURL. The Edit String box appears.
- In the Value data
field, add an s after http.
The value should be: https://(ADx Server
Name)/ReportServer (Figure 3). Figure 3. Edit String Box
- Click OK.
- Close the Registry Editor.
- Restart the computer.
- Log in to the Metasys Advanced
Reporting System UI.
The UI should open correctly and the URL in the browser window should have the https: prefix.