17.4 Changing a Non-Secure (HTTP) Environment to a Secure (HTTPS) Environment

If you are running in a non-secure staging environment, and you’re ready to move to production, you must perform the following steps to enable security.

  1. Change Identity Server configuration protocol to HTTPS. (See Section 12.4, Configuring Secure Communication on Identity Server.)

  2. Replace the test certificates with your own. (See Section 19.1.2, Using Access Manager Certificates or Section 19.1.3, Using Externally Signed Certificates.)

  3. Update all devices that are trusting this Identity Server configuration.

    This causes the Embedded Service Provider to reimport the metadata of Identity Server.

  4. (Conditional) If you have set up federation, reimport metadata for trusted service and identity providers. (See Section 2.7.7, Managing Metadata.)

  5. Change Access Gateway configuration to HTTPS. (See Configuring Access Gateway for SSL.)