locked
IFD + SSL RRS feed

  • Question

  • I've just enabled SSL on my server that runs CRM 4.0 with IFD. When I try to access the website I get the exception "UriFormatException: Invalid URI: The format of the URI could not be determined". I believe it's IFD's error because of SSL. Can anyone help ??

    Monday, June 15, 2009 11:54 AM

Answers

  • Hi Maciej,

    when i configure IFD on a server, i don't get direct in the SQL-Server, i use the IFD-Tools, that you can find here:
     

    http://support.microsoft.com/kb/948779/en-us


    The tool makes all changes for you in the Database and the registry. I think, that is the best way to make the changes for you and it is supported!
    Viele Grüße

    Michael Sulz
    axcentro GmbH
    Thursday, June 18, 2009 8:22 AM
  • Hi Maciej,

    i would delete the manuel changes in the database and then use the tool.
    Viele Grüße

    Michael Sulz
    axcentro GmbH
    Thursday, June 18, 2009 3:22 PM

All replies

  • Hi Maciej,

    we have several Server with CRM and use IFD and SSL. I never see this error bevore.
    What have you done to enable SSL for the CRM?


    Viele Grüße

    Michael Sulz
    axcentro GmbH
    Tuesday, June 16, 2009 7:00 AM
  • Hi, thank You for Your response. When I was intalling SSL, I followed the website http://rc.crm.dynamics.com/rc/regcont/en_us/op/articles/secure_comm.aspx . I haven't done anything more, just what is written at the website. So I changed 3 values in CRM Configuration Database and I changed port number in Windows registry (it's written at the website to do like that). Of course, I enabled SSL on IIS. I believe some other things need to be changed. Could You tell me if You did some other things while You're installing SSL ??
    Tuesday, June 16, 2009 1:55 PM
  • Hi Maciej

    I encountered this error, when i was using a server with IFD when IP6 was enabled (As Standard).

    Try turning IPv6 Off from the Local Area Connection Settings, and see if that makes a difference. I understood it as the the IPV6 translation of a ip address is different to the old more common ipv4 that we are all still using.

    Let me know if ive made any sense, and tell me how you got on.

    Good Luck

    Jonathan
    Tuesday, June 16, 2009 4:15 PM
  • Hello, thanks for the response. 
    I am still uncluky with configuring SSL on CRM.
    I disabled IPv6 but it didnt help. Another case is that my server, where we've CRM is on virtual machine. So ipv6 is probabably enabled on the host machine. 
    I figured out that the exception is because of wrong configuration in DeploymentProperties table in CRM's configuration table. The wrong values are in IFDSdkRootDomain and IFDWebApplicationRootDomain rows, in NVarCharColumn column.
    That's what I've done so far.
    I use Win2k8 + Sql Server 2005.
    I installed Wildcard certificate, gave it friendly name "CRM Wildcard" and checked Require SSL checkbox.
    I modified DeploymentProperties table, I changed:
     - in IFDRootDomainScheme row, in NVarCharColumn I changed value to https (lower case)
     -  in IFDSdkRootDomain and IFDWebApplicationRootDomain I typed certificate's friendly name, in my case "CRM Wildcard"
    After those changed, I restarted IIS and asynchronous services and I got the exception I was writing about.
    Now I wonder If should modify some other properties in configuration table ?? The website I used (http://rc.crm.dynamics.com/rc/regcont/en_us/op/articles/secure_comm.aspx) says those are only changed needed.
    Any suggestions??

    Thursday, June 18, 2009 7:50 AM
  • Hi Maciej,

    when i configure IFD on a server, i don't get direct in the SQL-Server, i use the IFD-Tools, that you can find here:
     

    http://support.microsoft.com/kb/948779/en-us


    The tool makes all changes for you in the Database and the registry. I think, that is the best way to make the changes for you and it is supported!
    Viele Grüße

    Michael Sulz
    axcentro GmbH
    Thursday, June 18, 2009 8:22 AM
  • Ok, thanks. Can U tell me if the parameters I put into CRM database are correct ?? I mean, for example, if I should put certificate's friendly name in NVarCharColumn  column in IFDSdkRootDomain row ??
    Thursday, June 18, 2009 12:03 PM
  • Hi Maciej,

    i would delete the manuel changes in the database and then use the tool.
    Viele Grüße

    Michael Sulz
    axcentro GmbH
    Thursday, June 18, 2009 3:22 PM
  • Ok, I was able to connect to CRM using SSL. But it was strange because before I logged into CRM, the IE popup had appeared. It was written that I's about to leave Secure Zone (sth like that) and when I clicked "NO" the signup website appeared (with https). After that, I tried to click "Yes" when the popup appeared and I wasn't able to see signup website due to access denied (http). It's a little strange for me. Does anyone know why that popup appeares ??
    Friday, June 19, 2009 12:48 PM