12.4 Changing a Non-Secure (HTTP) Environment to a Secure (HTTPS) Environment

If you are running in a non-secure staging environment, and you’re ready to move to production, you must perform the following steps to enable security.

  1. Change the Identity Server configuration protocol to HTTPS. (See Section 8.4, Configuring Secure Communication on the Identity Server.)

  2. Replace the test certificates with your own. (See Section 14.1.2, Using Access Manager Certificates or Section 14.1.3, Using Externally Signed Certificates.)

  3. Update all devices that are trusting this Identity Server configuration.

    This causes the Embedded Service Provider to reimport the metadata of the Identity Server.

  4. (Conditional) If you have set up federation, reimport metadata for trusted service and identity providers. (See Section 3.9.7, Managing Metadata.)

  5. Change the Access Gateway configuration to HTTPS. (See Configuring the Access Gateway for SSL.)