Setting up Aras Innovator for https is configured the same as any IIS web application; The binding for the website used must be configured for https:
If needed, you can force https via the IIS SSL Settings feature:
The main thing to keep in mind is that the certificate being used should come from a trusted certificate authority (Thawte, Verisign, GoDaddy, etc).
To enable https on your instance, you will need to edit the URLs in the following files in your code tree to their https counterparts.
Any URLs that are dynamically defined will need to be hard coded with the correct https URLs. You will also need to hard code the URL for your vault item. I would like to recommend that you create copies of files before editing them to make reverting changes easier just in case you run into issues when you finish making the necessary edits.
The URL in the OauthServerDiscovery tag should be updated, so the following: you can find this in the InnovatorServerconfig file
Would be updated to something similar to the following:
After setting up https you are unable to save a file in the vault. The error message states to check if your vault url is correct. If you find your vault url is correct, we have found this resolves the problem:
Open OAuthServer.Plugins.json file, this is in \OAuthServer
Disable the Aras.OAuth.Server.Plugins.CustomProtocol plugin:
// Enables Custom protocol type for OAuthServer