How to Update DocRecord's SSL Certificate
The following TechNote contains instructions on how to configure the DocRecord server so that the DocRecord web application will run using https/SSL. By default, the DocRecord web application is deployed to run using http.
In short, the values of two registry entries are required to be changed, the new certificate needs to be uploaded into the Windows' keystore, and lastly the IIS Binding needs to be updated.
These instructions assume that you are logged into the DocRecord server with a Windows account that has Admin access and are in possession of a valid IIS certificate.
Please follow the instructions outlined in the sections below.
Windows Registry Changes
Two DocRecord Windows registry keys need to be changed.
From the Windows START button type ‘Regedit’ and hit ENTER.
This should launch Microsoft’s Registry Editor application.
From the Registry Editor use the tree view in the left pane to navigate to the following registry key ‘HKEY_LOCAL_MACHINE\SOFTWARE\Prism Software\DocRecord\Server\Web’
In the right pane double click on the registry value called ‘UseSSL’ and change it’s value to ‘True’ and select ‘Ok’ to complete and exit.
From the Registry Editor use the tree view in the left pane to navigate to the second registry key HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Prism Software\DocRecord\Server\Web
Similar to step 3, double click on the registry value called ‘UseSSL’ and change it’s value to ‘True’ and hit ‘Ok’ to complete and exit.
Close the Windows Registry Editor application.
Add New Certificates to Windows' Certificate Store
From the Windows START button type MMC and hit ENTER
This should launch Microsoft Management Console
From the File menu select ‘Add or Remove Snap-ins’
From Available snap-ins select and add ‘Certificates’
When prompted for which certificates to manage, select “Computer Account”
To continue click the NEXT button
Select “Local computer” option and Click the Finish button
Click OK to exit the Snap-ins editor
From the tree view in the left plane navigate to Certificates/Personal/Certificates
From the Actions menu select All Tasks / Import to display the first page of the Certificate Import Wizard
To continue select the ‘Next’ button.
Browse to the location of the new certificate file and select.
Supply the certificate’s password.
To continue Click the NEXT button
Ensure Personal is selected. Do NOT select “Automatically…”
To continue Click the NEXT button.
To complete the Import Wizard Click the FINISH button.
Ensure the new certificate is listed under ‘Certificates’ in the correct folder.
Certificate import is complete. Continue with Bind Certificate to DocRecord
Bind Certificate to DocRecord
From the Windows START button type inetmgr and hit ENTER
Navigate to Default Web Site
From the Actions pane on the right select ‘Bindings’ from the ‘Edit Site’ tab (labeled 1 in screenshot below)
Select port 443 from the list of ‘Site Bindings’ (labeled 2 in screenshot). If port 443 is not listed it will need to be added by using the ‘Add…’ button (labeled 4 in screenshot)
Click Edit to configure (labeled 3 in screenshot)
Using the dropdown, select the appropriate certificate
NOTE: there may be more than one certificate listed. Use the “View” button to determine if you have the correct certificate selected (check expiration date).
NOTE: ensure the the Host name field remains blank.
Click OK / Close to return to IIS page.
RESTART website by using the ‘Restart’ action listed under the ‘Manage Website’ section.
From the Windows START button type services.msc and hit ENTER to open the Windows Services Manager window. Restart the DocRecord Document Service.
Complete
Users may need to clear their browser cache when they navigate/refresh the page