Summary

Both the Empirum Web Console and the Subdepot Webservices shall communicate via HTTPS protocol.

It is easy to realize for the Subdepot WebServices package via the collection variable SUBDEPOT because it uses the IIS anyway.

Because the Empirum Web Console is using an Apache Webserver configuring the HTTPS protocol is somewhat more complex.

It has to be done by setting up a URL Rewrite within the IIS which also can be used by the
Empirum Web Console.

Goal

After executing the steps of this How-To article the Empirum Web Console as well as the Subdepot Webservices are accessible on the same server via the HTTPS protocol.

First Step

Install the packages ‚Empirum Subdepot‘ and ‚Empirum Subdepot Webservices‘ (with appropriate SSL certificate by default) and the Empirum Web Console on a server OS.

Second Step

Install the Microsoft IIS URL Rewrite Module 2 (http://www.iis.net/downloads/microsoft/url-rewrite).

Install the Microsoft Application Request Routing 3.0 (http://www.iis.net/downloads/microsoft/application-request-routing).

Third Step

Within the Internet Information Service Manager (IIS) at the top level open the module "Application Request Routing Cache":In the "Action Pane" choose “Server Proxy settings......”

Highlight the checkbox "Enable Proxy" and exit the Module.

Fourth Step

Two new inbound rules must be created:

1. At the level “Default WebSite" open the module “URL Rewrite” and create a new “Blank Rule”.
   
   Enter these values into the field “Pattern”:
   ^WebConsole(?:/(.*))?$
   Consider using braces in the field „Rewrite URL“:
   http://localhost:8080/empirum/{R:1}
   Do not forget to enter a name into the field "Name".
2. At the level "Default WebSite" open the module "URL Rewrite" and create a new "Blank Rule".
   
   Enter these values into the field "Pattern":
   ^empirum(?:/(.*))?$
   Consider using braces in the field „Rewrite URL“:
   http://localhost:8080/empirum/{R:1}
   Do not forget to enter a name into the field "Name".

Fifth Step

Navigate to the file C:\Program Files\Empirum\WebConsole\Tomcat\conf\server.xml

Add following line to the section "Host":

<Context docBase="empirum" path="/WebConsole" />

The complete section without the comment lines:

<Host name="localhost"  appBase="webapps"
       unpackWARs="true" autoDeploy="true">
   <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
               prefix="localhost_access_log" suffix=".txt"
               pattern="%h %l %u %t &quot;%r&quot; %s %b" />
    <Context docBase="empirum" path="/WebConsole" />
 </Host>

Sixth Step

Restart the IIS and the service ‘Empirum-WebConsole’.

Now the Empirum Web Console is accessible via the address ‘https://<URL>/WebConsole’.

Usage with the UEM Console

The following configuration is only required for customers who use the UEM Console and want to display the Empirum Web Console logs inside the UEM Console.

To enable embedding of the Empirum Web Console in the UEM Console when not installed on the same server, configure the following HTTP response header on the Empirum Web Console server in IIS:

1. Open IIS Manager on the server where the Empirum Web Console is installed.
2. Select the Default Web Site.
3. Open HTTP Response Headers.
4. Add a new header with the following values:
   1. Name: Content-Security-Policy
   2. Value: frame-ancestors 'self' https://your-esm-server.com;

Replace https://your-esm-server.com with the URL of your Matrix42 ESM server that hosts the UEM Console.