Azure VM Role HTTPS

Question

How I enable HTTPS with a VM Role?

I have a wildcard certificate.

<?xml version="1.0" encoding="utf-8"?>
<ServiceConfiguration serviceName="TrilliumCrmDataQualityTest"
   xmlns="http://schemas.microsoft.com/ServiceHosting/2008/10/ServiceConfiguration">
   <Role name="MyVMRole">
      <Instances count="1" />
    <ConfigurationSettings>
      <Setting name="Microsoft.WindowsAzure.Plugins.Diagnostics.ConnectionString" value="UseDevelopmentStorage=true" />
      <Setting name="Microsoft.WindowsAzure.Plugins.RemoteAccess.Enabled" value="true" />
      <Setting name="Microsoft.WindowsAzure.Plugins.RemoteAccess.AccountUsername" value="tsqadmin" />
      <Setting name="Microsoft.WindowsAzure.Plugins.RemoteAccess.AccountEncryptedPassword" value="MIIBnAYJKoZIhvcNAQcDoIIBjTCCAYkCAQAxggFNMIIBSQIBADAxMB4xHDAaBgNVBAMME1dpbmRvd3MgQXp1cmUgVG9vbHMCD3QzzJJUJblB+8h/WnKcbzANBgkqhkiG9w0BAQEFAASCAQA9+lFEtiBF0zdeWiydmubYlzbU/eVnFhYd04Z+MqviM9YpXMpBOHs6bzNcT4i/pT8L6FYYE0zfJr5Ett4ORcDpY5fvhKxRL2syj21hrwY8gaw1TW8jL0SykvYyaDLLFjiNZizgkitRTGeQUegb4ZJNKpqyEaDx08KGQl4kYcYnNWSS0efkFTvwc0pFu3qtShSS9WivRircPPGRBIJFFYBuF66Q2D3wWvX6vKUIgL36iqpslufU0fHDeu/lRW6zJlyFNw+DQ2K4oTYPdPbKfgYEPj3No87jenwdd+Li/47dg0ZTxS9QXKSdu1cjzjf/Yic+AHKglGO4+hzi42Oi6DPNMDMGCSqGSIb3DQEHATAUBggqhkiG9w0DBwQIViRMerJ8Ge2AEG1QqMz+r0eruxODxPwOy8o=" />
      <Setting name="Microsoft.WindowsAzure.Plugins.RemoteAccess.AccountExpiration" value="2013-04-18T23:59:59.0000000-04:00" />
      <Setting name="Microsoft.WindowsAzure.Plugins.RemoteForwarder.Enabled" value="true" />
<!--Setting name="TrilliumSoftware.Mount.ProjectDriveUri" value="projects/fplfibernet 2012 07 17.vhd"/>
<Setting name="TrilliumSoftware.Mount.ProjectSnapShot" value="True"/>
<Setting name="TrilliumSoftware.Mount.TableDriveUri" value="postals/Tables.vhd"/>
<Setting name="TrilliumSoftware.Mount.TableSnapShot" value="True"/-->
    </ConfigurationSettings>
    <Certificates>
      <Certificate name="Microsoft.WindowsAzure.Plugins.RemoteAccess.PasswordEncryption" thumbprint=OMITTED thumbprintAlgorithm="sha1" />
      <Certificate name="MySSLCert" thumbprint=OMITED thumbprintAlgorithm="sha1"/>

    </Certificates>
   <OsImage href="Gold20120724.vhd"/>
   </Role>
</ServiceConfiguration>

<?xml version="1.0" encoding="utf-8"?>
<ServiceDefinition name="TrilliumCrmDataQualityTest"
   xmlns="http://schemas.microsoft.com/ServiceHosting/2008/10/ServiceDefinition">
   <VirtualMachineRole name="MyVMRole" vmsize="Small">
    <Imports>
      <Import moduleName="Diagnostics" />
      <Import moduleName="RemoteAccess" />
      <Import moduleName="RemoteForwarder" />
    </Imports>
   <Endpoints>
   <InputEndpoint name="http" protocol="http" port="80" localPort="80"/>
   <InputEndpoint name="https" protocol="https" port="443" localPort="443" certificate="MySSLCert"/>
   </Endpoints>
   <LocalResources>
     <LocalStorage name="ProjectDriveCache"/>
     <LocalStorage name="TableDriveCache"/>
   </LocalResources>
<ConfigurationSettings</ConfigurationSettings>
    <Certificates>
      <Certificate name="MySSLCert" storeLocation="LocalMachine" storeName="My" />
    </Certificates>
   </VirtualMachineRole>
</ServiceDefinition>

Answer 1

are you trying to access VM on 443?

Can you please give little more info on what you are trying to do?

If you are trying to access VM over 443 port here is the config you need to do

<Endpoints>
     <InputEndpoint name="Endpoint1" protocol="tcp" port="443" localPort="3389" />

</Endpoints>

Your localport must be always 3389 which default for RDP. your protocol must be TCP and not http.

---

Please mark the replies as Answered if they help and Vote if you found them helpful.

Answer 2

I am trying to use connect via HTTPS on port 443.

HTTPS is used encrypt HTTP traffic.

"Hypertext Transfer Protocol Secure (HTTPS) is a widely-used communications protocol for secure communication over a computer network, with especially wide deployment on the Internet. Technically, it is not a protocol in itself; rather, it is the result of simply layering the Hypertext Transfer Protocol (HTTP) on top of the SSL/TLS protocol, thus adding the security capabilities of SSL/TLS to standard HTTP communications." [http://en.wikipedia.org/wiki/HTTP_Secure]

Answer 3

HTTPS isBased on feed back from support, with the VM Role.

1) Upload the certificate

2) Add the certficate to the service configuration file

3) Add the HTTPS end point (443 by default)

4) Have a program create the HTTPS binding using Microsoft.Web.Administration (in Microsoft.Web.Adminstration.dll)

See

http://stackoverflow.com/questions/7759017/automate-ssl-cert-install-to-iis-6-sites-using-c-sharp

using

(ServerManager serverManager = new ServerManager())

{

Site site = serverManager.Sites["Default Web Site"];

if (site != null)

{

try{

site.Bindings.Add(

"*:443:", cert.GetCertHash(), store.Name);

}catch (Exception e){

//Handle Exception

}

}

serverManager.CommitChanges();

//Make sure you save the changes