Binding the certificate to the native port 9117

Binding the certificate to the native port 9117 requires the certificate’s thumbprint.

Prerequisites: The Windows Certificates(Local Computer)\Personal\Certificates folder is open.

Double-click Certificates.
The certlm — [Certificates — Local Computer\Personal\Certificates] window displays the certificates.
Double-click the certificate in the Windows certificate store and click the Details tab.
The Certificate opens.
Scroll down, click Thumbprint, select the thumbprint string and copy it to the text editor.
Launch Workbench, connect to the station with the MilestoneXProtectNetwork, expand Config > Drivers, right-click MilestoneXProtectNetwork and click Views > AX Property Sheet.

The Property Sheet opens.
Select the Native Process App Guid value and copy it to the text editor.
To add the certificate binding, go back to your command prompt (to the folder that contains the .pfx file) and issue this command:
netsh http add sslcert ipport=0.0.0.0:9117 certhash=Thumbprint appid={Native Process App Guid}.
Where Thumbprint is text copied from step no 3 and Native Process App Guid value copied in step 5.

For Example netsh http add sslcert ipport=0.0.0.0:9117 certhash=02096186dfbfebfebd9353b0ab43a40342a2e9e3 appid={458871b1-fafd-4cb5-abae-019d930da862}

The netsh command responds with:
SSL Certificate successfully added
To view the certificate bindings, enter this command:
netsh http show sslcert ipport=0.0.0.0:9117

The netsh command responds with:
SSL Certificate bindings:-------------------------IP:port : 0.0.0.0:9117Certificate Hash : 02096186dfbfebfebd9353b0ab43a40342a2e9e3Application ID : {458871b1-fafd-4cb5-abae-019d930da862}Certificate Store Name : (null)Verify Client Certificate Revocation : EnabledVerify Revocation Using Cached Client Certificate Only : DisabledUsage Check : EnabledRevocation Freshness Time : 0URL Retrieval Timeout : 0Ctl Identifier : (null)Ctl Store Name : (null)DS Mapper Usage : DisabledNegotiate Client Certificate : DisabledReject Connections : DisabledDisable HTTP2 : Not SetDisable QUIC : Not SetDisable TLS1.3 : Not SetDisable OCSP Stapling : Not Set
To delete the binding run this command:
netsh http delete sslcert ipport=0.0.0.0:9117

This sets up the client side of the secure connection between the station, native process and management server.

NOTE: Any changes you make to the native process, such as changing its port and assigning a certificate require that you delete any recording servers and discover them again. This is the same requirement when upgrading the driver from a previous version.

Binding the certificate to the native port 9117

Related Links