Setup TLS Certificate on IIS

A TLS certificate is configured on the server hosting the AVEVA Enterprise Resource Management Supplier Portal. Use a certificate signed by a commercial Certificate Authority (CA) to prevent suppliers from receiving untrusted certificate warnings when accessing the portal.

For testing you can create and use a self-signed certificate to install the Supplier Portal and replace it later with a certificate signed by a trusted CA.

To create a self-signed certificate

1. Open the Internet Information Services (IIS) Manager.

2. In the tree, select the server node.

3. In the middle panel, double-select on the Server Certificates.

4. In the actions list, select Create Self-Signed Certificate.

5. To install the certificate in the Personal certificate store, enter a name, and then select OK.

After installing a CA-signed or self-signed certificate, verify its thumbprint (fingerprint) by running the following command in a PowerShell console:

dir Cert:\LocalMachine\My

The command lists all certificates installed on the machine. Record the thumbprint of the required certificate for further use.