Epicor Web Access using HTTPS & SSL

[priteshe (Pritesh Parmar)]

I have the need to provide EWA (Customized project) to users outside of my network. I have setup an SSL certificate to work with EWA. I can get to the login page of EWA using https, but after entering username and password, I get an error message " Exception of type ‘System.ServiceModel.Channels.InvalidChannelBindingException’ was thrown.". Anyone have any tips resolving authentication issues with EWA / HTTPS?

Also i refereed “Mixed Mode Authentication - #24 by Olga” but i am confused with the web.config setup.

How do set web.config in my custom project?
How do i call SSL certification in web.config or in my custom code?

Please guide me, your help will be highly appreciated

Thanks,

[Mark_Wonsil]

You may find this thread useful as a way to expose Epicor to the world without EWA and with a stronger security model.

Epicor REST outside the domain

Epicor documentation contains the following: There are several ways of enabling users on the public internet to connect to services and protocols you have configured on servers on your network. The requirement for the ERP REST endpoints is that the Secure Socket Layer (SSL) https channel (typically port 443) be enabled and open for inbound/outbound traffic on your Epicor application server. The SSL certificate used to enable the SSL binding must be issued from a recognized certificate auth…

[Olga (Olga Klimova)]

It looks like config error between EWA and ERP to me.
What exactly you changed?

[priteshe (Pritesh Parmar)]

basically, I just followed “https://www.epiusers.help/t/mixed-mode-authentication/38749/24” link and did all the configuration and also created new SSL certificate and installed on Epicor app server, I have been trying to connect to Epicor web services from my local system (non-domain) but unsuccessful

But I am still confused about which config file needs to be corrected to get access of Epicor services.

[priteshe (Pritesh Parmar)]

@Olga, could you please help me to change config setting?

[Olga (Olga Klimova)]

I don;t know much about EWA settings, but the link you mention describes how ERP can be setup to use https. And EWA is a separate web application with its own web.config.

You don’t setup certificate in web.config, you setup it in IIS settings for the IIS.

So did you change any web.config for now and can you revert back those changes?

[Chris_Conn]

I cant speak to the EWA specifically but you can apply a cert to your server in Admin Console at the Server (not instance) level.

For EWA, if you have config’d https binding for ERP, I assume it ‘just works’ as seen in the extension module

[hkeric.wci (Haso Keric)]

It should support https… WCF Service Pages always seem to show http. Has nothing to do w/ EWA… im w/ Olga looks like a misconfiguration somewhere else.

[Chris_Conn]

It definitely does support it. I ran into a similar issue with an error related to https deployment. If you look in Event Viewer it will probably give you a clue related to your webconfig. In my case, there was a manually added scheme which broken things - not sure who added it, but you shoudnt be manually manipulating in most most cases - the Admin Console deployment will do this for you.