OK, so this might be the mother of all complex NAV 2009 deployments, but this is the NAV community, so I hope you can give me some answers.
Our client requires implementing SSL web services for their NAV 2009 implementation. I have already set them up for Three tiers on Three computers (as per their request), and I also successfully configured basic non-SSL web services, and they both work beautifully. I can access my webservices from the Dynamics NAV Server PC, from within the domain, and from outside the domain. I've setup the SPNs and everything WAS just humming and singing along nicely.
Now...they want us to configure the webservices to use SSL. So, I went through the following steps, as per all the MSDN documentation I could find:
1) Get the SSL certificate
2) Save it to the local Computer store
3) Fetch the certificate thumbprint
4) Use "netsh http" to register url acls - httpcfg was garbage...I continued to get the return code 183.
5) I changed the CustomSettings.config to enable SSL webservices
6) Restarted BOTH Dynamics NAV service and Web Services service
And now...I get an HTTP 500 Internal Error when I try to access the webservices from Internet Explorer. I changed the IE settings so I no longer see friendly error messages, and I found out that it was a NavPasswordException error. It turns out with SSL, My SQL Server is no longer accepting my login credentials, EVEN THOUGH THEY ARE EXACTLY THE SAME AS BEFORE SSL.
Now I got the same error message before when trying to run web services without SSL, and I was able to solve this by adding the SPNs and removing any duplicates that were found. And although it did work without SSL, now with SSL and even after adding the SPNs it is not working.
What I am missing here? Please help me out. I'll wait for your feedback.
MCP, MBSS, MCTS
As a follow up, I was FINALLY able to configure NAV 2009 Webservices for 3 Tiers/3 Machines WITH SSL. I've documented all the steps required to get it set up from A to Z in case I'm asked to recreate this setup somewhere else. I've also included some of the pitfalls and challenges that can be encountered in such a complex setup. Anyone interested in this document can message me, and I'll be happy to send them the document.
Hi Mohamad El-Sadek ,
I am facing the same problem with you, would you please share the setup step to me, thank you so much.
Could you please send me a copy of your instructions, as I have the same challenge and it would be great to avoid the pitfalls :)