Binding the certificate to the native port 9117

Binding the certificate to the native port 9117 requires the certificate’s thumbprint.
Prerequisites: The Windows Certificates(Local Computer)\Personal\Certificates folder is open.
  1. Double-click Certificates.
    The certlm — [Certificates — Local Computer\Personal\Certificates] window displays the certificates.
  2. Double-click the certificate in the Windows certificate store and click the Details tab.
    The Certificate opens.
    Image
  3. Scroll down, click Thumbprint, select the thumbprint string and copy it to the clipboard (Ctrl+C).
  4. Launch Workbench, connect to the station with the MilestoneXProtectNetwork, expand Config > Drivers, right-click MilestoneXProtectNetwork and click Views > AX Property Sheet.

    The Property Sheet opens.

    Image
  5. Paste the thumbprint into the Native Process App Guid property and click Save.
  6. To add the certificate binding, go back to your command prompt (to the folder that contains the .pfx file) and issue this command:
    netsh http add sslcert ipport=0.0.0.0:9117 certhash=ab62a6bb57d40f6ffa63e622a8a8a26b436e8a11 appid='{458871b1-fafd-4cb5-abae-019d930da862}'
    The netsh command responds with:

    SSL Certificate successfully added

  7. To view the certificate bindings, enter this command:
    netsh http show sslcert ipport=0.0.0.0:9117
    The netsh command responds with:

    SSL Certificate bindings:-------------------------IP:port : 0.0.0.0:9117Certificate Hash : ab62a6bb57d40f6ffa63e622a8a8a26b436e8a11Application ID : {458871b1-fafd-4cb5-abae-019d930da862}Certificate Store Name : (null)Verify Client Certificate Revocation : EnabledVerify Revocation Using Cached Client Certificate Only : DisabledUsage Check : EnabledRevocation Freshness Time : 0URL Retrieval Timeout : 0Ctl Identifier : (null)Ctl Store Name : (null)DS Mapper Usage : DisabledNegotiate Client Certificate : DisabledReject Connections : DisabledDisable HTTP2 : Not SetDisable QUIC : Not SetDisable TLS1.3 : Not SetDisable OCSP Stapling : Not Set

  8. To delete the binding run this command:
    netsh http delete sslcert ipport=0.0.0.0:9117
This sets up the client side of the secure connection between the station, native process and management server.
 NOTE: Any changes you make to the native process, such as changing its port and assigning a certificate require that you delete any recording servers and discover them again. This is the same requirement when upgrading the driver from a previous version.