Optional: Get a SSL certificate from Let’s Encrypt

We strongly recommend that Aligned Elements is connected via HTTPS. In order to configure HTTPS communication, you need an SSL Certificate. You might already have SSL certificates available in your organisation. If so, proceed to Binding your SSL certificate to the Aligned Elements web site

If not, we recommend “Let’s encrypt”, which provides SSL certificates free and easy with automatic updates. As a client app, download and install Certify the Web from http://certify.webprofusion.com/

For this step to work the DNS name you selected in section 1 must be active, pointing to the IP of the windows server.

Certify the Web communicates with the Let’s Encrypt Server via port 80 so for correct functionality, make sure that port 80 is open in your firewall(s) (i.e., if you host on Azure, you cannot restrict access via Azure to certain ip-addresses).

Start by adding a binding for port 80.

1. From the Connections column on the left, expand the Sites folder and click on your site (e.g. Elements) to select it.

2. From the Actions pane on the right, click on Bindings.

In the Site Bindings dialog, click Add if no existing binding to Port 80 exists, otherwise, click Edit to open it. Select “http” as type, “All Unassigned” in the IP address box and “80” in the Ports text box.

Click OK to Save.

Now we are ready to request a certificate using “Certify the Web” and “Let’s Encrypt”.

1. Start the Certify the Web application.

2. Click the New Certificate button in the upper left corner.

3. Select your site (e.g. Elements) in the “Select IIS Site” dropdown (If your web page is not appearing in the dropdown, it is possible that your web page is not running. To start your web page select the web page and start it with the menu Manage Website)

4. Enter the DNS Name in the “Add Domains for the certificate” text box

Click Save and the Request Certificate button.

The certificate request will take a few minutes but once installed it:

a) Automatically creates a new binding to port 443.

b) Will automatically update the certificate every 30 days.

Check the newly assigned certificate in bindings: