Switching From HTTP To HTTPS Connection
RecTrac 3.1
Table of Contents
Overview
This document describes the basic process of converting your RecTrac 3.1 from an HTTP to an HTTPS connection. Connections through the HTTPS protocol improve security by utilizing a Secure Socket Layer (SSL) Certificate to encrypt information sent between your RecTrac server and web browser.
This document guides you through the following:
· Changing necessary files to HTTPS on your RecTrac server.
· Updating RecTrac Interface Parameters.
· Updating Next Gen VIC.exe to HTTPS through establishing your VIC certification and editing your VIC profile.
Before You Proceed
You must decide how the client traffic will access the RecTrac server. This decision will determine whether to use a commercial SSL or to self-sign a certificate. Commonly, an external web server with a public IP address can use commercial SSLs while internal servers require a self-signed certificate. While Vermont Systems can help determine your ideal SSL option, we do not support or complete the installation, renewal, or setup of SSLs on your servers.
Once you have determined the SSL type as well as installed and configured the SSL in IIS, you can transition the RecTrac connection from HTTP to HTTPS.
You will need to obtain a commercially valid SSL certificate for your organization or create a self-signed certificate that meets industry standards.
Once obtained, follow SSL installation instructions from your SSL Provider (if applicable) and apply those instructions toward the server installed with IIS that facilitates the RecTrac connectivity and binds the SSL to the appropriate website.
This document describes the basic process for switching RecTrac 3.1 from HTTP to HTTPS. If you have additional questions after reading this document, contact Vermont Systems Support by phone at877-883-8757 or generate a support ticket through the Vermont Systems website’s Customer Portal using your Customer ID and password.
Note: If you are using Access Control for RecTrac 3.1, please email Vermont Systems Support at support@vermontsystems.comto discuss VIC installation options.
Changing Necessary Files to HTTPS on the RecTrac Server
Index.html and Indexdemo.html Files
Modify the index.html and the indexdemo.html files found in<X>:\VSI3\RecTrac\WebServer\GUI, where <X> is your mapped partition. In this file, you will change the protocol from HTTP to HTTPS, remove the server name and port number, and replace it with a valid subdomain and domain name (or just a valid domain name based on your setup), as shown below.
Before:
http://rectracserver:4180/wbwsc/client.wsc
After:
https://rectrac.myparkdistrict.com/wbwsc/client.wsc
Config.ini
Modify the config.ini file found in<X>:\VSI3\RecTrac\Programs\config.ini. Use Windows Notepad to replace the old connection information with the new connection information for both the live and demo databases, as shown below.
Before:
http://rectracserver:4180/wbwsc/client.wsc
After:
https://rectrac.myparkdistrict.com/wbwsc/client.wsc
Desktop Icons
Modify the RecTrac 3.1 and RecTrac 3.1 Demo Desktop Icons launch location by going to C:\VSI3\Misc\Icons and right-clicking on each Internet Shortcut file, selecting properties, and editing the URL: line, as shown below.
Before:
http://rectracserver:4180/wbwsc/client.wsc/login.html?interfaceParameter=RecTrac_1
After:
https://rectrac.myparkdistrict.com/wbwsc/client.wsc/login.html?interfaceParameter=RecTrac_1
Updating RecTrac Interface Parameters
1. Run Update Interface Parameters using the DB_Utilities on the RecTrac Database Server.
2. Select Update Interface Parameters, as shown below.
3. Click Next and follow the setting shown below. Enter your base HREF with the correct protocol, subdomain, and domain and top-level domain (the ”.com,” if applicable). Select the database to change—in this case<X>:\vsi3\rectrac\data\live. Note: You also will need to run the update against the demo database Interface Parameters or refresh the demo database using the same DB_Utility.
4. Click Process, and then exit the utility.
Updating Your VIC Profile to HTTPS
To switch RecTrac 3.1 from HTTP to HTTPS, you must update your VIC profile to HTTPS. To update your VIC profile, you must be using Next Gen VIC.exe. If you are using a legacy version of VIC, refer to Quick Guide to Installing Next Gen VIC to switch to Next Gen VIC.exe.
Note : If you are using Access Control for RecTrac 3.1, please email Vermont Systems Support at support@vermontsystems.com to discuss VIC installation options.
Once you are using Next Gen VIC.exe, to update your VIC profile to HTTPS, you must edit your VIC profile and verify that you are using the correct RecTrac server URL. Follow these steps to update your VIC from HTTP to HTTPS:
1. Editing Your VIC Profile:
- Updating the VIC path to https://localhost:
i. Update your VIC profile by opening Profile Assignments and locating your VIC profile in Linked Profiles. Select your VIC profile and click Update.
ii. Under VIC Startup, the “Set Default Path” should read “RecTrac_1| HTTP | EXE.” To move your VIC profile from non-secure to secure, in the Set Default Path dropdown, select RecTrac_1 | HTTPS | EXE.
iii. Selecting RecTrac_1 | HTTPS | EXE from the Set Default Dropdown should properly update your VIC path to read https://localhost.
- VIC Startup Parameters – Verifying the URL and Correcting Port Numbers:
i. Verifying Correct URL: Ensure that the ConnectStr option is set to https://[YOUR DOMAIN NAME],as in “https://OPS-JASONV.vt.net.”
ii. Adjusting Port Number: When you update your VIC profile by selecting “HTTPS,” by default, the system establishes the port in the “65XXXX”range. Therefore, you need to manually check and change your port number. For Next Gen VIC.exe, you will need to change your port number to 55110:
2. In VIC Startup Parameters, change your port number to 55110.
3. In VIC Connection Port, change your port number to 55110.
- Verifying Correct RecTrac Server URL:
i. Once you have adjusted your port numbers in VIC Startup Parameter sand VIC Connection port, click VIC Installation.
ii. In the VIC Installation screen, scroll down to VIC Windows Installer.
iii. Adjust the RecTrac server URL so that “https + your domain name” precedes “/VIC/exe/Windows/VSI_VIC_Setup.exe,” as in https://OPS-JASONV.vt.net/VIC/exe/Windows/VSI_VIC_Setup.exe.
iv. Click Save to establish your VIC connection as HTTPS.