Run AEM instance on HTTPS mode with out dispatcher

[ramgopalm545617]

We have a request from internal IT, if we can run AEM with https with out using dispatcher.

currently we are accessing the aem instance using http://host:port, but they intend us to use https://host:port, what should we do to let AEM run on https on the same port?

[Nupur_Jain · Accepted solution]

Hi @ramgopalm545617 

You can not run AEM HTTP and HTTPs on same port, you have to give a different port while setting up HTTPS for AEM. 

Refer https://docs.adobe.com/content/help/en/experience-manager-64/administering/security/ssl-by-default.h... for setting up HTTPS(SSL).

What you can do is restart AEM author instance on some other port than the one you are currently using. Now the HTTP port is different, Now while setting up HTTPs, set the current port as HTTPs port.

Hope it helps!

Thanks!

Nupur

[ramgopalm545617]

Hi @Nupur_Jain,

thanks for the quick response, can we run AEM only on https port and not accessible on http?

Will ther be any impact in using the https port in the dispatcher configuration?

[Nupur_Jain]

Hi @ramgopalm545617 

you can go to http://localhost:4502/system/console/configMgr

and Configure "Apache Felix Jetty Based Http" and remove check from Enable HTTP.

Also, now your connection to dispatcher will be secured, in /renders section where aem instance ip and port are mentioned, you will have to provide secure as 1 and perform other tasks on dispatcher as well. Refer https://docs.adobe.com/content/help/en/experience-manager-dispatcher/using/configuring/dispatcher-ss...  to unable HTTPs connection through dispatcher.

[vanegi]

Hi @ramgopalm545617,

You can implement SSL to set up an AEM instance to run over HTTPS, please check https://docs.adobe.com/content/help/en/experience-manager-learn/foundation/security/use-the-ssl-wiza... for more details.

Thanks!!

[ramgopalm545617]

thanks for the quick response, can we run AEM only on https port and not accessible on http? Will ther be any impact in using the https port in the dispatcher configuration?

[Kunal_Gaba_]

Please challenge your IT and ask them to setup dispatcher in front of AEM author instance. It is always better for performance and security reasons to have dispatcher in front of AEM. Dispatcher setup does not take much time and is more easier to manage as well. 

[ramgopalm545617]

even with dispatcher infront of the AEM instance, they want to make sure AEM is running on https section

[PriyamDa]

You can use AEM SSL Setup Wizard to run Aem Author on HTTPS by default  will run on 8443 port. It doesnt impact AEM Author and Publisher running on other port. So you all other configuration will not get impacted.