Configure SSL for Autodesk Vault

Learn about setting up Internet Information Services (IIS) with Secure Socket Layers (SSL) to work with Autodesk Vault.

The configuration described in the help provides an encrypted secure connection between Vault clients and the Vault server. When configuring SSL, you need to determine where you get a certificate for the bindings in IIS. Certificates can be generated as a self-signed certificate in IIS, an internal certificate authority (CA), or a publicly known certificate authority such as Verisign.

There are four parts to configuring SSL for Autodesk Vault:

1. Create a Self-Signed Certificate

  1. Select the server node in the tree view and double-click the Server Certificates feature in the list view.
  2. Click Create Self-Signed Certificate... in the Actions pane.

  3. Enter a friendly name and click OK.

2. Set up SSL on IIS

  1. Start Internet Information Services, if it is not already running.
  2. Expand the Sites tree and select the website that is hosting the AutodeskDM Virtual Directory. In the image below, the website is Default Web Site. Select Default Web Site and click Bindings from the Actions pane.

  3. Click Add and change the type to https and change the SSL Certificate to the certificate's friendly name that you installed. Click OK.

  4. Click Close.
  5. Start the ADMS Console, select Tools Administration.
  6. In the Advanced tab, check the box next to Enable compatibility with SSL. Click OK.
    Note: If the console appears saying that SSL is not enabled, the certificate may have been issued using a FQDN instead of the NetBIOS name of the server. Continue with the steps and be sure to use the FQDN in the steps.
  7. Close the ADMS Console.
  8. Select the AutodeskDM Services Virtual Directory and double-click the SSL Settings button.

  9. In the SSL Settings page, click the Require SSL option.

  10. If you are planning to use client certificates, click the Require option under Client certificates. If not, make sure the Ignore option is selected.
  11. Click Apply from the Actions pane.
  12. Repeat steps 8-11 for the AutodeskDM ServicesFile Store Virtual Directory.
  13. Repeat steps 8-11 for the AutodeskTC Virtual Directory if you want to configure the Vault Thin Client.

3. Configure the Vault Server

Connectivity.ADMSConsole.exe.config

  1. Make a copy of the connectivity.ADMSConsole.exe.config located in the <install path>\Autodesk\ADMS Professional 20##\ADMS Console\ directory.
  2. Open the config file with Notepad.
  3. Find the <system.serviceModel><client> section and edit the endpoints to https://FQDN (Fully Qualified Domain Name). There are three lines that need editing. Note: on two lines you need to remove "localhost:80".
  4. In the <connectivity.vaultmanager> section, change the value of IPADDRESS value from 127.0.0.1 to FQDN, change the value of SSL from 0 to 1 and change the value of value of PORT from 80 to 443 Note: Do not include "HTTPS".
  5. Save the configuration file.

Web.config

  1. Make a copy of the web.config file located in the <install path>\Autodesk\ADMS Professional 20##\server\web\services\ directory.
  2. Open the config file with NotePad.
  3. Find the <system.serviceModel><client> section and edit the endpoints to https://FQDN. There are four lines that need editing.
  4. Save the configuration file.
  5. Restart IIS.

Connectivity.WindowService.JobDispatch.exe.config

  1. Make a copy of the Connectivity.WindowsServer.JobDispatch.exe.config file located in the <install path>\Autodesk\ADMS Professional 20##\server\dispatch directory.
  2. Open JobDispatch application configuration file with Notepad.
  3. In the <System.servicemodel><client> section, change value of address from http://localhost:80 or computer name to https://FQDN
  4. Save the configuration file.
  5. Restart the service via Control Panel->Administrative Tools->Services.msc

Verify SiteConfiguration.xml

  1. Open the file C:\ProgramData\Autodesk\VaultServer\Configuration\SiteConfiguration.xml with Notepad.
  2. In the <SiteConfiguration> section, verify the value of Uri and secureUri reflects the https://FQDN and verify that the generateUri value is false.
  3. Close or Save the configuration file.

4. Configuring the Client Workstations

The following must be performed on the machine connecting to the Vault Server.

Install the Certificate (CA)

  1. Launch the MMC -> Add Certificates Snap-in for Local Machine.
  2. Import %CA_NAME%.pfx to the "Certificates - (Local Computer) -> Trusted Root Certification Authority location.
  3. Import %CA_NAME%.crl to the "Certificates - (Local Computer) -> Trusted Root Certification Authority location.

SSL is now configued for Vault Server.

Parent topic: Vault Server Administration