Help
  • Explore Community
  • Get Started
  • Ask the Community
  • How-To & Best Practices
  • Contact Support
Notifications
Login / Register
Community
Community
Notifications
close
  • Forums
  • Knowledge Center
  • Events & Webinars
  • Ideas
  • Blogs
Help
Help
  • Explore Community
  • Get Started
  • Ask the Community
  • How-To & Best Practices
  • Contact Support
Login / Register
Sustainability
Sustainability

Join our "Ask Me About" community webinar on May 20th at 9 AM CET and 5 PM CET to explore cybersecurity and monitoring for Data Center and edge IT. Learn about market trends, cutting-edge technologies, and best practices from industry experts.
Register and secure your Critical IT infrastructure

Smart Connector: http end point using https data source with self signed certificate

SmartConnector Forum

Schneider Electric support forum about SmartConnector applications for integration of other building management systems (BMS) into EcoStruxure Building Operation.

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • Home
  • Schneider Electric Community
  • EcoStruxure Building
  • SmartConnector
  • SmartConnector Forum
  • Smart Connector: http end point using https data source with self signed certificate
Options
  • Subscribe to RSS Feed
  • Mark Topic as New
  • Mark Topic as Read
  • Float this Topic for Current User
  • Bookmark
  • Subscribe
  • Mute
  • Printer Friendly Page
Invite a Co-worker
Send a co-worker an invite to the portal.Just enter their email address and we'll connect them to register. After joining, they will belong to the same company.
You have entered an invalid email address. Please re-enter the email address.
This co-worker has already been invited to the Exchange portal. Please invite another co-worker.
Please enter email address
Send Invite Cancel
Invitation Sent
Your invitation was sent.Thanks for sharing Exchange with your co-worker.
Send New Invite Close
Top Experts
User Count
JeffBowman
Sisko JeffBowman Sisko
164
ardak
ardak Schneider Alumni (Retired)
34
sesa180908_brid
Commander sesa180908_brid Commander
34
mike_meirovitz
Commander mike_meirovitz
21
View All

Invite a Colleague

Found this content useful? Share it with a Colleague!

Invite a Colleague Invite
Solved Go to Solution
Back to SmartConnector Forum
Solved
ChrisLaurentius
ChrisLaurentius Schneider Alumni (Retired)
Schneider Alumni (Retired)

Posted: ‎2018-06-11 07:54 PM

1 Like
4
1246
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

‎2018-06-11 07:54 PM

Smart Connector: http end point using https data source with self signed certificate

Hi,

How do I set Smart Connector http end point with https source using self signed certificate?

I am always getting incorrect user name & password from the smart connector end point defined, despite using correct user name and password.

I am working on a client where they are changing all end point data source (SBO, PME, and DCE) from http to https.

All those systems are using self signed certificate.As Smart Connector is at the backend, we may not need to use https for Smart Connector's end point, yet.

This is similar to Adam Summers​ post, but he is defining the SC end point as https.

-I will post another question for that test (https SC end point with https data source)

EWS RESTful EWS Gateway binding with HTTPS

Setup:

Smart Connector version SmartConnector-2.3.117 with ISC.CustomSoapRestProvider.dll

Data source: DCE 750 on https only using self signed certificate.

Test done, setting SC http end point with https source using self signed

1.Downloaded DCE's self signed certificate from browser

2. Added DCE.cer to both Local Computer's Trusted Root CA and Personal

     I can open a web browser from this windows where SC is to DCE's https without any prompt on untrusted certificate.

3.Defined SC end point as http, but with https DCE EWS source:

4.I can access http end point, but it always stated incorrect password, despite using correct user name and password

5.SOAP UI to DCE EWS via https using the same user name and password works:

Tags (4)
  • Tags:
  • dce
  • ews
  • https
  • smart connector
Reply
  • All forum topics
  • Previous Topic
  • Next Topic

Accepted Solutions
Adam_Summers
Lt. Commander Adam_Summers Lt. Commander
Lt. Commander

Posted: ‎2018-06-13 07:10 AM

0 Likes
1
1195
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

‎2018-06-13 07:10 AM

Jeff, I'm supporting Chris on this one. There are 2 separate issues he's having. I haven't got to looking at the HTTPS to the API but am sure this is just a certificate issue. If I find anything useful to share with the community I will do on this post. I've been working with him on the https connection from the API to the ES, the following is useful for reference. If anyone want's to use the HTTP Rest Gateway and secure communication from the API to ES (which of course you should ) then my advice is to follow this topic and generate a new self signed certificate in the ES and add this to the Trusted Root Certificate store on the SmartConnector server Follow the guide here http://help.sbo.schneider-electric.com/Topics/show.castle?id=10339&locale=en-US&productversion=2.0&a... - after that simply setting the endpoint address to https should work. If you are seeing the error "Could not establish trust relationship for the SSL/TLS secure channel with authority 'localhost'.

The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

The remote certificate is invalid according to the validation procedure." in your log, then you need to add the certificate of the server (ES/AS) to your machine. It is advisable to generate a new certificate rather than use the default one.

See Answer In Context

Reply
Replies 4
JeffBowman
Sisko JeffBowman Sisko
Sisko

Posted: ‎2018-06-13 07:02 AM

0 Likes
3
1195
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

‎2018-06-13 07:02 AM

Hi Christopherus,

If I understand this questions correctly, you want to be able to connect to DCE from the SOAP EWS Rest Provider over HTTPs.(but the REST Endpoint is still HTTP)

Unfortunately the screenshots that are attached here are too small and I can't make out what your settings are set as. But in theory if HTTPS is configured on the EWS Endpoint (in this case DCE) then in theory.. All you need to do is set the 'Server Address' field in the SOAP EWS REST Provider to have a URL that starts with https:// instead of http:// (and of course, set the correct port if it is not the default HTTPS port)

If this doesn't work, can you set the logging level to TRACE, and turn on Rest Serve and Ews Consume logging filters to 'True', then run some tests using Swagger again, and attach those logs here?

Regards,

-Jeff

Reply
Adam_Summers
Lt. Commander Adam_Summers Lt. Commander
Lt. Commander

Posted: ‎2018-06-13 07:10 AM

0 Likes
1
1196
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

‎2018-06-13 07:10 AM

Jeff, I'm supporting Chris on this one. There are 2 separate issues he's having. I haven't got to looking at the HTTPS to the API but am sure this is just a certificate issue. If I find anything useful to share with the community I will do on this post. I've been working with him on the https connection from the API to the ES, the following is useful for reference. If anyone want's to use the HTTP Rest Gateway and secure communication from the API to ES (which of course you should ) then my advice is to follow this topic and generate a new self signed certificate in the ES and add this to the Trusted Root Certificate store on the SmartConnector server Follow the guide here http://help.sbo.schneider-electric.com/Topics/show.castle?id=10339&locale=en-US&productversion=2.0&a... - after that simply setting the endpoint address to https should work. If you are seeing the error "Could not establish trust relationship for the SSL/TLS secure channel with authority 'localhost'.

The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

The remote certificate is invalid according to the validation procedure." in your log, then you need to add the certificate of the server (ES/AS) to your machine. It is advisable to generate a new certificate rather than use the default one.

Reply
JeffBowman
Sisko JeffBowman Sisko
Sisko

Posted: ‎2018-06-13 07:13 AM

0 Likes
0
1195
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

‎2018-06-13 07:13 AM

Thanks for the update Adam Summers​!

-Jeff

Reply
ChrisLaurentius
ChrisLaurentius Schneider Alumni (Retired)
Schneider Alumni (Retired)

Posted: ‎2018-06-13 08:37 PM

1 Like
0
1195
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

‎2018-06-13 08:37 PM

Adam Summers​, your suggestion works, just the common name.

Was simply missing:

  1. the self signed certificate entry for Common Name (CN), use source ip address if host name/dns is not available.

As earlier, this self signed certificate needs  to be added to the trusted root certificate on the Windows where SC is installed

In pictures, easier, also for my own reference...

EBO:

In DCE:

Reply
Preview Exit Preview

never-displayed

You must be signed in to add attachments

never-displayed

 
To The Top!

Forums

  • APC UPS Data Center Backup Solutions
  • EcoStruxure IT
  • EcoStruxure Geo SCADA Expert
  • Metering & Power Quality
  • Schneider Electric Wiser

Knowledge Center

Events & webinars

Ideas

Blogs

Get Started

  • Ask the Community
  • Community Guidelines
  • Community User Guide
  • How-To & Best Practice
  • Experts Leaderboard
  • Contact Support
Brand-Logo
Subscribing is a smart move!
You can subscribe to this board after you log in or create your free account.
Forum-Icon

Create your free account or log in to subscribe to the board - and gain access to more than 10,000+ support articles along with insights from experts and peers.

Register today for FREE

Register Now

Already have an account? Login

Terms & Conditions Privacy Notice Change your Cookie Settings © 2025 Schneider Electric

This is a heading

With achievable small steps, users progress and continually feel satisfaction in task accomplishment.

Usetiful Onboarding Checklist remembers the progress of every user, allowing them to take bite-sized journeys and continue where they left.

of