Bind the SSL certificate to the Connect service SSL port

Import the CA-signed certificate to the computer that hosts the Connect service.
  1. Copy the thumbprint of the imported certificate.
    1. Double-click the imported certificate.
    2. Click the Details tab.
    3. In the Show dropdown list, click Properties Only.
    4. In the Field column, click Thumbprint.
    5. Copy the hexidecimal values into a text editor. Delete the spaces between the hexadecimal values. For example, if you copied 80 82 41 2f..., it becomes 8082412f...
    6. Keep the text editor open.
  2. If required, login to the computer that hosts the Connect service with the service account.
  3. Open a command prompt (run as administrator).
  4. Check that a certificate is not already bound to port 8082. Type netsh http show sslcert. If you use a new certificate, document the hash information for port 8082. The certificate hash is used in step 4.
    If a certificate is bound to port 8082 or a port that you want to use, type netstat -abn > netstatoutput.txt to output the list of ports and processes to which they are bound. You must first delete the certificate before binding the new certificate or select a new port to bind the SSL. If you choose to bind the certificate to another port, consider this modification when configuring the Connect service. To delete the existing certificate, type netsh http delete sslcert ipport=0.0.0.0:8082 or the port that you want to bind the certificate to.

    For more information about netsh, visit the Technet Library to see Netsh Commands for Hypertext Transfer Protocol (HTTP).

  5. Bind the certificate to the SSL port. In a command prompt (run as administrator), type netsh http add sslcert ipport=0.0.0.0:<port> certhash=<thumbprint> appid={E1743F08-8F12-41DB-BCCD-9E30FF2100EA}
    Where <thumbprint> is the thumbprint of the signed certificate that you exported to the text editor. For instructions, see Import the signed certificate to the computer that hosts the Connect service.
  6. Press Enter.
  7. To verify the certificate binding, type netsh http show sslcert.
  1. Enable SSL communications.
  2. Configure your environment to send requests over SSL. For more information, see 'Configuring BlackBerry Connect connection settings' in the BlackBerry Connect administration content.