How to Configure the Orchestrator Web Service to use HTTPS

Updated: May 13, 2016

Applies To: System Center 2012 SP1 - Orchestrator, System Center 2012 - Orchestrator, System Center 2012 R2 Orchestrator

Use the following steps to configure Secure Sockets Layer (SSL) for the System Center 2012 - Orchestrator web service and Orchestration console.

To configure the Orchestrator web service to use Secure Sockets Layer (SSL)

1. Request and install a certificate on the computer where you installed the Orchestrator web service. For guidance about requesting and installing a certificate, see How to implement SSL in IIS on the Microsoft Support website.

2. Configure SSL on the machine that hosts the web service and Orchestration console. The default port for the web service is port 81, and the default port for the Orchestration console is port 82. You should configure the ports as appropriate for your installation.

   You can configure the bindings by performing the following steps:

   1. Open Internet Information Services (IIS) Manager.

   2. In the Connections pane, expand the Orchestrator web server, expand Sites, and then click Microsoft System Center 2012 Orchestrator Web Service.

   3. In the Actions pane, click Bindings.

   4. In the Site Bindings dialog box, click Add.

   5. In the Add Site Binding dialog box, in the Type box, select https and select your SSL certificate.

   6. Specify the Port to use. The default of 443 is recommended.

   7. Click OK.

   8. Click Close.

3. In the Microsoft System Center Orchestrator 2012 Orchestration Web Service pane, under IIS, double-click SSL settings.

4. In the SSL Settings pane, select Require SSL.

5. Click Apply.

6. Repeat the procedure for Microsoft System Center 2012 Orchestrator Orchestration Console using a different port. Port 444 is recommended.

For more information about securing Internet Information Services (IIS) 7, see Configure Web Server Security (IIS 7).

To update the Orchestration console web.config file

1. On your Orchestrator web server, locate the web.config file at C:\Program Files (x86)\Microsoft System Center 2012\Orchestrator\Orchestration Console .

2. Open web.config in an editor.

3. Locate the service URI key, and update the key to connect to the web service through HTTPS. For example: change <add key="ScoServiceUri" value="http://<domain>:81/Orchestrator2012/Orchestrator.svc/"/> to <add key="ScoServiceUri" value=" https://<domain>:443/Orchestrator2012/Orchestrator.svc/"/>.

   Note

   If you used a port for the web service other than 443, then use that port number.

Perform Post-Installation Tasks