none
Add SSL to SharePoint

    Question

  • I have extended my SharePoint sites to ssl on the INtranet zone so I can now test and so far everything looks good but now I need to go full ssl and was wondering the best process to accomplish this task. Do I just change the AAM to make the default zone ssl from ssl on the intranet zone? and will this fix if someone tries to connect using http it will change it to ssl?
    Monday, April 24, 2017 2:24 PM

All replies

  • Hi,

    Do you want to change the https to default zone?

    If yes, it’s not supported to change Intranet zone to Default directly. As a workaround, you can click http://sp to change it to https://sp:

    Why do you want to set this? Do you meet any issue or want to meet any requirements? Please talk more about your requirement.

    Thanks,

    Dean Wang


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com


    Thursday, April 27, 2017 1:00 PM
    Moderator
  • I extended to SSL on all my web applications and I am able to change the mappings and get https to work on the default zone for any web apps using manage path site collections but the problem is when I try to change the host name site collections I run into complications. I was able to use PowerShell to do a site rename and remap in testing and now  I can get SSL on the default zone for the host name site collections but I have read Microsoft does not allow this and now I am wondering why does seem to be working in testing? Maybe a CU that fixed boundary and I am just worried if I do in production I might run into unforeseen issues if this is not something really supported. I am just trying find out as much as possible before making this change in production. Does Microsoft support changing the default zone from http to https on host name site collections? if so what is the best way to accomplish and below is the code I use to change the mapping.

    after extending to ssl I did the following

    remove-spsiteurl https://test

    $site = get-spsite http://test

    $site.Rename("https://test")

    Set-SPSiteurl -identity https://test -url http://test - zone intranet

    Thursday, April 27, 2017 5:58 PM