3. Add a Fortified ID virtual host
Configure a Apache Web server virtual host for Fortified ID product.
Scenario
Section titled “Scenario”When Apache Web server is installed and you have added a certificate file you need to configure what to reverse proxy. This is an example for all Fortified ID product reversed proxied.
Prerequisite
Section titled “Prerequisite”- Windows server 2019 or later
- Make sure you completed use case Add SSL certificate
Configure a Apache Web server virtual host
Section titled “Configure a Apache Web server virtual host”-
Open file c:\Apache24\conf\httpd-ssl.conf
-
Scroll to bottom of the file.
-
The file ends with the ending of the default virtual host
</VirtualHost> -
Put the curser right above the VirtualHost ending.
-
Paste the following section to add the reverse proxy parameters for the Fortified ID products
-
Paste the following section to add the reverse proxy parameters for the Fortified ID products
# Enable ProxyProxyPreserveHost On# Incoming. Example host and port, http://FID_SERVER:PORT/# Only enable below what you like to be accessed from outside# Enable Fortified ID PortalProxyPass "/portal" "http://localhost:8090/portal"# Enable Fortified ID Web/IdPProxyPass "/saml/" "http://localhost:8080/saml/"# Enable Fortified ID Password ResetProxyPass "/pwdreset" "http://localhost:8091/pwdreset"# Enable Fortified ID Enrollment (OATH_SW, OATH_HW, Passkeys, MobileID)ProxyPass "/enrollment/" "http://localhost:9090/enrollment/"# Enable Fortified ID MobileID - MOS serverProxyPass "/mos" "http://localhost:9097/mos"# Enable Fortified ID MobileID - MOS clientProxyPass "/mosclient/" "http://localhost:9096/mosclient/" -
In the example above you might need to adjust the URL to the different services to map your environment. If you have any other service that you want proxypass, just add it accordingly in the file.
-
Locate the line ServerName www.example.com:443. Update the line with example below.
Change dev.fortifiedid.se to the server name you use.ServerName dev.fortifiedid.se:443 -
Save file
-
Start service Apache HTTP Server
-
Test your configuration from a browser outside the server
-
If things does not work:
- Check any firewall that might prevent communication
- Check Apache Web Server log-files in C:\Apache24\logs