locked
CRM 4.0 on premise with secure Internet access RRS feed

  • Question

  • Is it possible to run CRM40IFDTool and still connect internally to HTTP://CRM and externally to HTTPS://CRM.COMPANY.COM?

    What we had before and what we have now:

    We had a CRM 4.0 installed on a single virtual server. Everything was working fine on LAN (we connect to http://CRM), except we need to provide access to CRM from Internet...
    What we did:
    1. installed an additional virtual NIC in CRM VM and connected it to external network with real IP address
    2. created an A record in our DNS zone like CRM.COMPANY.COM for that IP address

    What we got - CRM became accessible from internet like http://crm.company.com which is OK except it's not secure, so I bought an SSL cert from godaddy and installed it on IIS on CRM. Also I turned ON "require secure channel (SSL)" option. After that, off course, we could access CRM on https://crm.company.com, and can't access it's on http://crm.company.com - which is OK, but, LAN users now can't also access http://CRM and https://CRM... Which is not ok. So I turned OFF "require SSL" option.

    We also tried to use CRM40IFDTool like described in manual "How to configure an Internet-Facing Deployment for Microsoft Dynamics CRM 4.0"... It works but not exactly as we need, we need to use URL like CRM.COMPANY.COM and not COMPANY.CRM.COMPANY.COM, how we got it with this tool.

    Now, left option "require SSL channel" on IIS as OFF and disabled port 80 on firewall, so external users only have one option to connect securely to https://CRM.COMPANY.COM and local users will be able to continue use http://CRM. It's not VERY good. And internal and external users use same Integrated auth. - which is not also very good.

    Tuesday, September 8, 2009 4:01 PM

Answers

  • Hi,

    of course.

    You can use IFD to change the userauthentification for the external user to form bases authentifikation and run the site over SSL.

    To become https:// crm.company.com the name of your crm-organisation must be crm.
    Viele Grüße

    Michael Sulz
    axcentro GmbH
    MVP für Microsoft Dynamics CRM
    • Marked as answer by Jim Glass Jr Tuesday, September 8, 2009 5:22 PM
    Tuesday, September 8, 2009 4:10 PM
  • You could try this method.

    Open database MSCRM_CONFIG and then the  table Organization.
    This table contains information for all organization.
    Rename columns UniqueName, FriendlyName to the new organization name.
    Open ORG_MSCRM database table OrganizationBase.
    Add to column name the new organization name.

    Try this on your test CRM lab first.

    Do  you have any thing install as an addon?
    If not this should work.
    Friday, September 11, 2009 3:26 AM
    Moderator

All replies

  • Hi,

    of course.

    You can use IFD to change the userauthentification for the external user to form bases authentifikation and run the site over SSL.

    To become https:// crm.company.com the name of your crm-organisation must be crm.
    Viele Grüße

    Michael Sulz
    axcentro GmbH
    MVP für Microsoft Dynamics CRM
    • Marked as answer by Jim Glass Jr Tuesday, September 8, 2009 5:22 PM
    Tuesday, September 8, 2009 4:10 PM
  • Hi Michael,
    Could we change the name of our organisation after crm was deployed?
    Thursday, September 10, 2009 2:38 PM
  • You could try this method.

    Open database MSCRM_CONFIG and then the  table Organization.
    This table contains information for all organization.
    Rename columns UniqueName, FriendlyName to the new organization name.
    Open ORG_MSCRM database table OrganizationBase.
    Add to column name the new organization name.

    Try this on your test CRM lab first.

    Do  you have any thing install as an addon?
    If not this should work.
    Friday, September 11, 2009 3:26 AM
    Moderator