Skip to main content

Server certificate configuration

To enable TLS, server certificate with private key must be provided. Default configuration accepts .pfx certificate file.

1. Prepare TLS server certificate file​

Steps to configure server certificate:

  1. Generate TLS server certificate as needed for the server;
  2. Store the server certificate as .pfx file
    1. Store it in the certificates/tls directory with name server-certificate.pfx.

2. Provide .pfx password in configuration, if needed​

note

If .pfx without password is used, this step can be skipped.

  1. Open appsettings.json
  2. Find the Kestrel configuration section
  3. Provide actual certificate password in the Password field (Kestrel --> Endpoint --> Https --> Certificate --> Password).