3.1 Enabling HTTPS

MetaDefender for Secure Storage can be configured to support HTTPS communication when accessing the Web UI and REST API.

Enable HTTPS on Windows-based deployments

In order to setup HTTPS communication please follow these steps:

  1. Obtain the certificate and the private key as two separate files (for example, crt.pem & key.pem )

  2. It is essential to rename the key file in the form of <name>.key such that the extension of the file is .key

  3. Place the certificates in docker\webclient folder inside the installation directory (by default, in C:\Program Files\OPSWAT\MetaDefender for Secure Storage\docker\webclient)

  4. Navigate to the docker folder (by default, in C:\Program Files\OPSWAT\MetaDefender for Secure Storage\docker)

  5. Open a PowerShell command prompt and run the following command

    PS> .\mdss.ps1 -u enable_https
  6. Verify that HTTPS is configured correctly by navigating with your browser.

Enable HTTPS on Linux-based deployments

In order to setup HTTPS communication please follow these steps:

  1. Obtain the certificate and the private key as two separate files (for example, crt.pem & key.pem )

  2. It is essential to rename the key file in the form of <name>.key such that the extension of the file is .key

  3. Place your certificates in /etc/mdss/webclient/

  4. Run the enable_https utility by executing the following command:

    sudo mdss -u enable_https
  5. Verify that HTTPS is configured correctly by navigating with your browser.