Configure the MES Web Portal component

Note: The MES Web Portal configuration requires that the IIS default web site be called Default Web Site. If this name has been changed (for example, to Default Website with no space in Website), then the configuration will fail.

The MES Web Portal component, shown in the following figure, includes Identity Manager settings. These settings specify:

• The Identity Manager client registration for the MES Web Portal

• The SSL certificate and HTTPS port for the MES Web Portal

  

Configure the MES Web Portal component

1. Decide whether to select the Update option. See Addressing IIS Feature Delegation Conflicts.

2. Complete the Identity Manager client registration settings:

   AIM Host

   The fully qualified domain name of the node on which the Identity Manager is running.

   If you enter localhost or the standard host name, it will be converted to the fully qualified domain name during configuration.

   AIM HTTPS Port

   The port number for the Identity Manager.

   The default value is 443, which is the default for HTTPS.

   The Identity Manager port number must match the System Management Server's HTTPS port number, which can be viewed or set on the System Management Server component's Advanced Configuration settings (see System Management Server and local node common platform HTTPS port settings).

   User Name and Password

   The user name and password of an admin account on the node on which the Identity Manager is running. If user accounts are managed with Windows Active Directory, the User Name entry must include the domain and user name in the format domain\username.

3. Complete the SSL configuration settings:

   SSL Certificate

   The SSL certificate for MES Web Portal.

   If you switch from an SSL certificate that has already been configured to a different certificate, you will get a warning prompt indicating that the HTTPS port is already configured with the thumbprint of the current certificate. To proceed with replacing the currently configured certificate, click Yes. To cancel the replacement of the currently configured certificate, click No.

   Note the following about assigning an SSL certificate to MES Web Portal:

   • MES Web Portal can be assigned a wildcard SSL certificate, which can cover multiple subdomains of your domain. For example, the wildcard certificate that is issued for *.yourdomain.com could cover plantA.yourdomain.com, plantB.yourdomain.com, and so on.

   • The certificate that is assigned to MES Web Portal can be different than the certificate that is assigned to the System Management Server.

   • MES Web Portal has been tested with the automatically generated <machine name> ASB Root certificate and custom (FQDN) certificates. Certificates from AVEVA Historian and AVEVA OPC UA Server do not work with MES Web Portal.

     HTTPS Port

     The port number for MES Web Portal.

     The default value is 443, which is the default for HTTPS.

     Note the following about configuring SSL certificate to MES Web Portal:

   • If the SSL certificate is configured with a third-party certificate then the port number does not need to match the local SMS HTTPS port setting.

   • If the SSL Certificate is configured with a self-signed certificate that is generated from the local SMS with the 'Automatically Generated' option, then the SSL configuration HTTPS port must match the local SMS HTTPS Port setting. Verify the setting in the Ports tab of the System Management Server Advanced Configuration dialog. For more information, see Implement secure communication with System Management Server.

4. Select Configure.

   The Configurator checks for IIS feature delegation conflicts. If any IIS feature delegation conflicts are found, a message is logged that feature delegations were detected that must be added to the IIS configuration to support MES Web Portal. For more information, refer to Addressing IIS Feature Delegation Conflicts.

   When the MES Web Portal configuration is complete, a success message appears in the Configuration Message box. Also, the MES Web Portal status indicator changes to a green check mark.

Reconfiguring the Web Portal If the System Management Server HTTPS Port Number Is Changed

If the System Management Server HTTPS Port number is changed, change the AIM HTTPS Port number to match it and reconfigure the Web Portal component.