Microsoft DynamicsNAV App setup

1. Prepare a SSL certificate (Self-signed certificate or purchase from a certificate authority).

2. Ensure the Dynamics NAV Web client is work and setup properly.
- the web client instance point correct database/NAV instance.
- the web client instance using user authentication match desired NAV instance authentication.

3. Prepare a "location" for download the certificate file. (If planning use Self-signed certificate)
- the certificate file can be store at web client folder.

- Please ensure the certificate "location" is enable MIME type for download certificate file.
(It can be check at IIS Manager)


- Add new MIME type for download certification file.
(MIME type - application/pkix-cert)

4. Generate the Self-signed certificate.
- Download and save the PowerShell script from 
https://gallery.technet.microsoft.com/scriptcenter/Self-signed-certificate-5920a7c6#content.

- Open a PowerShell prompt with the option As administrator.


- Go to the directory where you saved the New-SelfSignedCertificateEx.ps1 file.


- Run the following command: Import-Module .\New-SelfSignedCertificateEx.ps1.


- Then run the following command: New-SelfSignedCertificateEx –Subject 'CN=<your site name>' –IsCA $true –Exportable –StoreLocation LocalMachine -SubjectAlternativeName certauth.fs.<your site name>, <your site name> -FriendlyName 'UICL App Cert'

If using Domain name to generate the cert.
New-SelfSignedCertificateEx –Subject 'CN=*.'CN=<Domain Name>' –IsCA $true –Exportable –StoreLocation LocalMachine –StoreName My -SubjectAlternativeName certauth.fs.<domain name> <domain name>

5. Import the Self-Signed Certificate to App Server.

- Open the mmc.exe.


- Go to the File menu, and then choose Add/Remove Snap-in...


- Select Certificates.
- Choose Add.


- Select the computer account.


- Choose Finish and then OK.

- Locate and copy the certificate you just created in the personal/certificates folder.

 
- Paste the certificate into the Trusted Root Certification Authorities/Certificates folder.
(right-click the Certificates the folder)


- Select the certificate, right-click and export the certificate.


- Select the No, do not export the private key option.
- Choose Next.
- Select DER encoded binary x.509 (.cer).


- Specify a location and filename and finish the wizard.

6. Adding an HTTPS Binding That Uses the Certificate on the Microsoft Dynamics NAV Web Client Site.

- Open Internet Information Services (IIS) Manager.
- In the Connections pane, expand the Sites node, and then choose the Microsoft Dynamics NAV Web client site to which you want to add the binding.
(By default, the site has the name Microsoft Dynamics NAV 2017 Web Client.)
- In the Actions pane, choose Bindings.


- In the Site Bindings dialog box, choose Add.


- In the Add Site Binding dialog box, set the Type field to https.

(You can use the default port 443 or change it to another port. If you change it to another port, you will have to provide the port number in the URL when you try to open the client.)

- Set the SSL certificate field to the certificate that you obtained or created for the site.
- Choose the OK button, and then choose the Close button.

- Restart the IIS.

Android

Download the Self-signed certificate for authentication. (It using Chrome at this case)
- this article shows download the Self-signed certificate from Web client folder.
- edit following link for your environment.
- http://<host IP or name>/<web instance name>/webclient/<cert file name>.cer


Install Self-signed certificate.
- locate the cert file and click it to install to Smart Phone.


- Finish the authentication screen.

- Given the meaningful name to identify the cert.


Download the app at Google Play Store.
- search Dynamics NAV key word at Google Play Store.
- or use the direct app page link - https://play.google.com/store/apps/details?id=com.microsoft.dynamics.nav

- search OpenVPN key word at Google Play Store.
- or use the direct app page link - https://play.google.com/store/apps/details?id=net.openvpn.openvpn

Download the VPN configuration file from the Portal.

Download and Import the VPN configuration file to Smart Phone.
- Open the OpenVPN app and press + icon at right corner.


- Locate the file and Import.

iOS

Download the Self-signed certificate for authentication. (It using Safari at this case)
- this article shows download the Self-signed certificate from Web client folder.
- edit following link for your environment.
- http://<host IP or name>/<web instance name>/webclient/<cert file name>.cer


Allow to download the certificate file. Press Allow to continue.


Close it and open the Setting app. Press Close to continue next steps.


Once open the Settings app it will show row "Profile Downloaded" at the top. Go to Profile Downloaded page.


Install the Certificate. Press Install to continue.


Press Install to pass the warning message.


Press Install to further confirm and install certificate file.


Install completed and press Done to leave.


Go to Settings > About > Certificate Trust Settings
(you can search key word by search box at setting app home page.)
- Toggle on to Enable the certificate.

Re-Confirm the action. Press Continue to continue next steps.

Download the app at App Store.
- search Dynamics NAV key word at App Store.
- or use the direct app page link - https://apps.apple.com/hk/app/dynamics-nav/id895261188?l=en

- search OpenVPN key word at App Store.
- or use the direct app page link - https://apps.apple.com/hk/app/openvpn-connect/id590379981?l=en

Download the VPN configuration file from the Portal.

Download and Import the VPN configuration file to Smart Phone.
- Open the Safari app and go to download link.


Open the Download files list at right corner and select the download the VPN configuration file.


Use Share button on right corner.
 

Select the OpenVPN app to open it.


Notification and usage policy has been approval before use.


Select Add to import the VPN profile.


Fill in the VPN login information and Press Add to add the vpn profile to smart phone. 


Press Allow to add the profile.