SSL configuration for Optitrade Confirm

Issue

Configuring SSL for using Optitrade Confirm UI

Solution

1. Create a Self signed certificate
   
   Once you have SSL configured and working, you can replace the self signed certificate with one issued by a trusted authority in compliance with your company’s security policy. For the purposes of Optitrade Confirm application any certificate is good.
   1. Create a self signed security certificate on IIS using the selfSSL utility from Microsoft. Once you have the SSL Utility in pace, run the following command (as Administrator)
      selfssl /N:CN=<your.domain.com> /V:<number of valid days>
      
   2. Place the certificate in the trusted root folder as well.  Go to Start -> Run -> enter mmc
      
   3. In the console go to File -> Add/Remove Snap-in
      
   4. Add certificate from the left hand side
      
   5. Select Computer account -> Local Computer -> select Finish
      
   6. Select certificate and Click on OK to view the certificates
      
   7. Navigate to Personal -> Certificates and locate the certificate you setup using the SelfSSL utility. Right-click the certificate and select copy
      
   8. Paste the certificate in the Trusted Root Certification Authorities -> Certificates folder
      
       
2. Configure SSL for your Application Pool in IIS
   1. In your IIS Manager go to Server Certificates, the certificate you just created should be present, else import it
      
   2. Enable SSL for the OptitradeTradeExplorer site. Select Require SSL and accept certificate options
      
   3. In the Default Web Site bindings, add a new binding
      
   4. Link the certificate you created the binding you have just created
      
       
3. Configuration in Optitrade Confirm application
   
   Edit the TradeExplorer web.config file in
   <InstallationDrive>:\Program Files\Optitrade Confirm\Trade Explorer\web.config
   
   Take a backup of the file before you start editing. Change httpTransport to httpsTransport as shown below. Change the security mode to Transport for the webHttpBinding and basicHttpBinding as shown below.
   
    
4. Do an IISRESET
    
5. Open the OptitradeConfirm UI using https
   
   

Level of Complexity 

Moderate, High

Applies to  

​