Server setting for App connection

1. Prepare a SSL certificate (Self-signed certificate or purchase from a certificate authority).

2. Ensure the Dynamics NAV Web client is work and setup properly.
- the web client instance point correct database/NAV instance.
- the web client instance using user authentication match desired NAV instance authentication.

3. Prepare a "location" for download the certificate file. (If planning use Self-signed certificate)
- the certificate file can be store at web client folder.

- Please ensure the certificate "location" is enable MIME type for download certificate file.
(It can be check at IIS Manager)


- Add new MIME type for download certification file.
(MIME type - application/pkix-cert)

4. Generate the Self-signed certificate.
- Download and save the PowerShell script from 
https://gallery.technet.microsoft.com/scriptcenter/Self-signed-certificate-5920a7c6#content.

- Open a PowerShell prompt with the option As administrator.


- Go to the directory where you saved the New-SelfSignedCertificateEx.ps1 file.


- Run the following command: Import-Module .\New-SelfSignedCertificateEx.ps1.


- Then run the following command: New-SelfSignedCertificateEx –Subject 'CN=<your site name>' –IsCA $true –Exportable –StoreLocation LocalMachine -SubjectAlternativeName certauth.fs.<your site name>, <your site name> -FriendlyName 'UICL App Cert'


If using Domain name to generate the cert.
New-SelfSignedCertificateEx –Subject 'CN=*.'CN=<Domain Name>' –IsCA $true –Exportable –StoreLocation LocalMachine –StoreName My -SubjectAlternativeName certauth.fs.<domain name> <domain name>

5. Import the Self-Signed Certificate to App Server.

- Open the mmc.exe.


- Go to the File menu, and then choose Add/Remove Snap-in...


- Select Certificates.
- Choose Add.


- Select the computer account.


- Choose Finish and then OK.

- Locate and copy the certificate you just created in the personal/certificates folder.

 
- Paste the certificate into the Trusted Root Certification Authorities/Certificates folder.
(right-click the Certificates the folder)


- Select the certificate, right-click and export the certificate.


- Select the No, do not export the private key option.
- Choose Next.
- Select DER encoded binary x.509 (.cer).


- Specify a location and filename and finish the wizard.


6. Adding an HTTPS Binding That Uses the Certificate on the Microsoft Dynamics NAV Web Client Site.

- Open Internet Information Services (IIS) Manager.
- In the Connections pane, expand the Sites node, and then choose the Microsoft Dynamics NAV Web client site to which you want to add the binding.
(By default, the site has the name Microsoft Dynamics NAV 2017 Web Client.)
- In the Actions pane, choose Bindings.


- In the Site Bindings dialog box, choose Add.


- In the Add Site Binding dialog box, set the Type field to https.

(You can use the default port 443 or change it to another port. If you change it to another port, you will have to provide the port number in the URL when you try to open the client.)

- Set the SSL certificate field to the certificate that you obtained or created for the site.
- Choose the OK button, and then choose the Close button.


- Restart the IIS.