SSL Certificate and Https Configuration
How to configure SharperLight to use Https and SSL Certificates for both the Web Channel and API Web Service
The HTTPS protocol and SSL Certificates are handled by IIS so IIS must also be installed alongside Sharperlight for this protocol. If http is being used then IIS is not required.
Please note:
If in addition to setting Sharperlight up to use https you wish to also make the Service available on the Internet please set the External Base address URL in Client Setup with the public address. For example: www.mycompany.com
Also make sure that you port forward port 443 to the application Server on the router. Remember if you make a Service accessable from the internet to enure that you have secured all the Accounts in Site Setup with the correct level of access.
Setting up a SSL Certificate using IIS7 or higher
Click Server Certificates
You can create a Self Signed Cert if you don’t have a proper one
Click Bindings on the Web Site
Bind the SSL Cert to Port 443
Client Setup – Server Side Select Https and leave the Ports blank so they default to 443
Client Setup – Client Setup Select Https and leave the port blank so it defaults to 443
Start the SharperLight Service directly or as a Windows Service, notice the URLs now show https
The Web Channel will require a logon even to see the main landing page if Https is enabled
How to Setup a certificates to target just one domain address used by Sharperlight when multiple certificates exist
Additional Comment
If the HTTPS endpoint is available internally but not externally, I suspect that your network infrastructure, operating system, or security middleware is not configured to allow external connections to this environment.
As a result, while no further changes are required for Sharperlight itself, enabling external access via HTTPS may involve several steps, depending on the hosting environment and security requirements.
Since we lack details about your hosting or network infrastructure, it’s challenging to provide specific guidance—and such advice would fall well beyond the scope of Sharperlight support. I recommend contacting your infrastructure team to coordinate the necessary steps tailored to your setup.
As a starting point, I suggest checking whether the following areas have been configured to permit external connections:
- Network firewall and port forwarding
- Operating system-level firewall
- Reverse proxy routing (if applicable)
- Internal DNS records (if applicable)
- Any additional security software operating within the network.