Running TIM Plus over SSL (HTTPS)

To configure TIM Plus to run over HTTPS (HTTP over SSL), you'll need a valid SSL certificate issued by a trusted certificate authority (CA). The certificate should be in PKCS#12 format (usually with a ".pfx" extension) and include the private key. To apply the certificate to TIM Plus, follow the steps below.

Prerequisites

This guide presumes you have already installed your (valid) SSL certificate into the MY certificate store using the Local Machine account, since TIM Plus runs as a system service in that context. You will need your certificate file as well as the password for it.

Installing the certificate to the MMC certificate store

1. Install the certificate by double-clicking on the certificate. This will open the certificate import wizard.

2. Now we need to select where you would like the certificate stored. Since TIM Plus is a system application, it will need to be installed to the "Local Machine".

   

3. Click Next to continue; Windows UAC may pop up, in which case, press "Yes" to continue.

4. The wizard will now ask you which file you would like to import. As we’ve double-clicked on the file, this should contain the location of the .pfx we initially double-clicked on. Note: If this isn’t correct, please click "Next" and browse to the certificate you want to import.

   

5. The wizard will now prompt you to enter the password for the Private Key contained within the certificate. Enter your password and click "Next". If the password is valid, it will allow you to continue with the import of the certificate.

   

6. The wizard will now prompt you to select where you'd like to install the certificate. The certificate needs to be installed to the "Personal" store. Select this and press "Next" to continue.

   

7. The final stage of the wizard is a summary of the import. Click "Finish" and the certificate will be imported into the Local Certificate store. The wizard will inform you of a successful import.

Checking the Local Certificate store for the imported certificate

1. Press the Windows key + R to launch the Run dialog. Enter mmc.exe and click "OK". Choose "Yes" if the UAC box requests authorisation.

   

2. The Management Console will appear. From here, add a new snap-in by clicking on "File", then choosing "Add or Remove Snap-in", then "Certificates", then "Add".

3. You'll then be asked to select which snap-in you'd like the manage. Select "Certificates", then press "Add".

   

4. When asked which account you want to manage, choose "Computer account", then press "Next".

   

5. Select "Local Computer (the computer this console is running on)" and click "Finish".

   

6. In the "Add or Remove Snap-ins" window, within the "Snap-ins" panel, select "Console Root > Certificates (Local Computer)", and click "OK".

   

7. Within the Console window, expand the "Console Root" folder, expand "Certificates (Local Computer)". Expand "Personal", then "Certificates". In the right-hand pane, you should now see the certificate you imported.

   

Configuring your certificate in TIM Plus

1. Log in to TIM Plus using the root account from a web browser running on the same machine as TIM Plus. If you do not know your root password, please contact your vendor's Technical Support team. After successfully logging in as root, click the "Settings" tab at the top, choose "Web server" on the left-hand side.

2. Ensure the correct web server port is selected; HTTPS typically uses port 443.

3. Select the security protocol to be used. For maximum compatibility, select "HTTPS (Automatic)" here. If your organisation has specific requirements, you may select other security protocols, such as SSL2, SSL3, TLS1.0, etc.

4. In the "Server certificate" drop-down box, select your newly-installed certificate.

5. Click "Test settings" to check if your certificate was installed successfully. If it was, you'll see a green confirmation.

6. Save your new settings by clicking on "Save settings" in the top right hand corner of the page.