Summary

This article outlines the steps for installing a new SSL / TLS certificate for Jira Align Self-Hosted. A new certificate may be required under the following circumstances:

• This is a new deployment of Jira Align
• This is an existing deployment and one or more of the following is true:
  • the existing certificate is expiring or has been revoked
  • the site hostname is changing
  • the certificate authority is changing
  • a different certificate algorithm is required

Environment

Jira Align Self-Hosted

Solution

Configuring an SSL / TLS certificate for the Jira Align website is relatively simple as it uses the same standards for any IIS website. It is independent of the application itself and is performed by installing the certificate in the Windows Certificate Manager and configuring the certificate on the website's bindings in IIS Manager.

Here are the general steps required to install a new SSL / TLS certificate for the Jira Align website. This assumes you have the complete certificate you wish to install in PFX format... i.e. it should include the entire key chain = public cert + intermediate cert + root cert + private key.

1. Install the PFX certificate in the Windows Certificate Manager under: Certificates (Local Computer) > Personal > Certificates
2. In IIS Manager, configure the Jira Align site’s https (443) binding to point to the new SSL certificate. This is found under Sites > [sitename] > Bindings > [https binding] > SSL certificate drop-down.
3. Restart the site.

NOTE: If the URL hostname itself is changing, the Server Name value in Jira Align's administration settings should also be updated to reflect this. This is found under:
Settings > Platform > Security tab > Server Name