none
SCOM 1807 - Web Console URL RRS feed

  • Question

  • Hi,

    Does changing the default web console URL from https://MS1/operationsmanager and https://MS2/operationsmanager to https://webconsole/operationsmanager supported ?

    1. i have set a DNS record pointing towards the management servers hosting the web console for round robin.

    2. issued certificate for the new record

    3. https binding created and url changed in console

    4. Enable SSL set in IIS.

    i manage to browse with the new URL via HTTPS successful and HTTP gives 403.

    The problem im facing is that if i browse https://MS1/operationsmanager or https://MS2/operationsmanager, i get "the connection is not private" since the certificate has been issued for the new record, however site still loads. 

    Changing the HTTPS binding hostname to the new record, the whole web console stops working.

    Is there a supported way to disable access to the default URLs https://MS1/operationsmanager or https://MS2/operationsmanager ?

    Tuesday, October 15, 2019 7:48 AM

All replies

  • Hi,

     

    From your description, I know the issue is that when set HTTPS binding to the new record under IIS, the whole web console stops working. If there’s any misunderstanding, please let us know.

     

    Could you collect the following information to clarify the issue?

    1. Please get a screen shot of the Web Addresses setting in console.

    2. Please get a screen shot of the HTTPS binding set in our environment.

    3. Please get a screen shot of the web console when it is not working. Did it stuck on access page or the content display page.

     Note: please hidden the privacy information like domain name in the picture.

    Please collect the above information and if there’s any question, please let us know.

     

    Best regards.

    Crystal


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    Tuesday, October 15, 2019 10:30 AM
  • Could try using a CNAME record to make it easier?

    Website: www.walshamsolutions.com Technical Blog: https://www.walshamsolutions.com/technical-blog Personal Blog: https://www.walshamsolutions.com/personal-blog Twitter: Dwalshampro

    Tuesday, October 15, 2019 2:41 PM
  • Hi,

    I've encountered issues when changing the Web Console URL, I would also use a CNAME in this case, try that out and check if it works out for you.

    Otherwise you might simply reinstall the Web Console feature, and provide the new configuration during the installation, it doesn't take long to reinstall.

    Best regards,
    Leon


    Blog: https://thesystemcenterblog.com LinkedIn:

    Tuesday, October 15, 2019 2:46 PM
  • As it is today (as explained above) works well, however web console is still accessible through the HTTPS://MS1/operationsmanager. The latter triggers an error due to certificate mismatch, but still works. 

    I only need leave the new URL accessible. 

    I cannot create a CNAME since i have 2 MS with round robin, hence why i created 1 new record for both.

    Wednesday, October 16, 2019 7:54 AM
  • Hi,

     

    Based as I know, https website with the localhost or sever name format can be always accessed when it can find the server and then its IIS. Removing A record is not reasonable in an environment. Maybe you can consult our IIS support to see if there’s any method on IIS side. The IIS forum is as below:

    https://forums.iis.net/

     

    Hope it can help.

     

    Best regards.

    Crystal

     


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, October 18, 2019 2:55 AM
  • HI, Thanks for your input.

    I am considering putting the Web consoles behind an LB and restrict IPs through IIS.


    Monday, October 21, 2019 10:18 AM
  • Hi,

    Thanks for your update. Hope you can share the detailed method after it is successful. have a nice day!

    Best regards.

    Crystal


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, October 22, 2019 7:38 AM