Set up the web server - Knowledge Base Office Maker / BiblioMaker

Office Maker Business contains a web server for publishing database data via OMB Mobile or REST.

When you call up the Set up the web server command in the Maintenance Web menu, a window appears in which you define the web server parameters.

Notice : this command is available only with a local server version of Business.

Configuration tab

IP address	Web server address
HTTP port	Port used for the unsecure connection. Usually port 80 or 8080.
Port HTTPS	Port used for the secure connection. Usually port 443 or 8443.

Security tab

Use this tab to define the parameters required to establish a secure connection, in order to prevent unauthorized third parties from accessing confidential data. This mode of operation is recommended. The data published by OMB Mobile (address file, customer contacts, statistics, etc.) is not intended to be consulted by anyone outside your company.

If OMB Mobile is only to be used within an internal IT network, there's no need to secure the connection. However, if the aim is to access data from outside the network, security measures are essential to prevent your data falling into the wrong hands. A Virtual Private Network (VPN) can be an interesting solution, as all communications between the remote device and your internal network are encrypted. In the absence of a VPN, encryption of OMB Mobile data is recommended.

Please note: a secure connection uses the SSL/TLS protocol and requires an authentication certificate issued by an independent organization. You must therefore obtain a certificate from one of these organizations. The Security tab dialog makes it easy to request one, and stores the certificate issued by the appropriate authority.

Generate the CSR and private key

This button displays a form to fill in to request a certificate.

Domain

Domain name encoded in the certificate. The web server must be part of the domain name entered here. If the computer has a sub-domain, enter its name followed by the domain name (e.g. business.papyrus.ch). You can also enter the server's IP address; however, some certificate issuers require a domain name.

E-mail

E-mail address of the contact person for domain name registration.

Some certificate issuers require the e-mail address to contain the name of the registered domain, as proof that the certificate applicant actually works in the domain in question.

Key length

The length of the key influences the security of the encryption. The greater the length, the more difficult it will be for someone without the key to decode the encryption. The length is often imposed by the certificate issuer.

Copy the CSR to the clipboard

The CSR (Certificate Signing Request) is a file to be sent to the certification authority, containing all the information required for its generation. It is linked to the private key generated at the same time as the CSR. However, the key must be carefully kept on the server and never passed on to anyone else. The CSR can be saved in a text file for archiving purposes.

Install the certificate and private key

Once you've received the certificate from the CA, use this button to select it from the disk (.crt, .pem or .txt file). A second dialog lets you choose the private key generated in the previous step.

The software places the certificate (possibly converted) and the private key in its own folder. This is why it is necessary for the software to have write permissions to this folder.