Implementing NAV 2009 SSL Web Services for Three Tiers on Three Computers

Implementing NAV 2009 SSL Web Services for Three Tiers on Three Computers

This question is answered

Hi all,

OK, so this might be the mother of all complex NAV 2009 deployments, but this is the NAV community, so I hope you can give me some answers.

Our client requires implementing SSL web services for their NAV 2009 implementation. I have already set them up for Three tiers on Three computers (as per their request), and I also successfully configured basic non-SSL web services, and they both work beautifully. I can access my webservices from the Dynamics NAV Server PC, from within the domain, and from outside the domain. I've setup the SPNs and everything WAS just humming and singing along nicely.

Now...they want us to configure the webservices to use SSL. So, I went through the following steps, as per all the MSDN documentation I could find:

1) Get the SSL certificate

2) Save it to the local Computer store

3) Fetch the certificate thumbprint

4) Use "netsh http" to register url acls - httpcfg was garbage...I continued to get the return code 183.

5) I changed the CustomSettings.config to enable SSL webservices

6) Restarted BOTH Dynamics NAV service and Web Services service

And now...I get an HTTP 500 Internal Error when I try to access the webservices from Internet Explorer. I changed the IE settings so I no longer see friendly error messages, and I found out that it was a NavPasswordException error. It turns out with SSL, My SQL Server is no longer accepting my login credentials, EVEN THOUGH THEY ARE EXACTLY THE SAME AS BEFORE SSL.

Now I got the same error message before when trying to run web services without SSL, and I was able to solve this by adding the SPNs and removing any duplicates that were found. And although it did work without SSL, now with SSL and even after adding the SPNs it is not working.

What I am missing here? Please help me out. I'll wait for your feedback.

Regards,


Mohamad El-Sadek

MCP, MBSS, MCTS

Verified Answer
  • Hi all,

    As a follow up, I was FINALLY able to configure NAV 2009 Webservices for 3 Tiers/3 Machines WITH SSL. I've documented all the steps required to get it set up from A to Z in case I'm asked to recreate this setup somewhere else. I've also included some of the pitfalls and challenges that can be encountered in such a complex setup. Anyone interested in this document can message me, and I'll be happy to send them the document.

    Regards,


    Mohamad El-Sadek

    MCP, MBSS, MCTS

All Replies
  • Hi all,

    As a follow up, I was FINALLY able to configure NAV 2009 Webservices for 3 Tiers/3 Machines WITH SSL. I've documented all the steps required to get it set up from A to Z in case I'm asked to recreate this setup somewhere else. I've also included some of the pitfalls and challenges that can be encountered in such a complex setup. Anyone interested in this document can message me, and I'll be happy to send them the document.

    Regards,


    Mohamad El-Sadek

    MCP, MBSS, MCTS