Configuring SSL for ITAM Web Services WSDL

Products

• CA IT Asset Manager
• ASSET PORTFOLIO MGMT- SERVER
• CA Service Management - Asset Portfolio Management

Issue/Introduction

‘Server error in /APIService application http 404 The resource cannot be found ‘ error is returned when trying to access the Asset Portfolio Management web service via the  WSDL URL with SSL enabled.

ie. Trying to access  https://<ServerNamewith FQDN>APIService/Gen/BAAAAAC/B/Service.svc/basic.wsdl)

returns the following error:

‘Server error in /APIService application http 404 The resource cannot be found ‘

Environment

Release: UAPMAC990JPP-14.1 and higher

Component:  Asset Portfolio Management-Asset Configuration

Cause

When Secure Socket Layer (SSL)  is configured on the Asset Portfolio Management app\web server, additional configuration needs to be done to the Windows Communication Foundation (WCF) web.config.

Resolution

Make the below changes in the web.config file of the WCF Service on the CA APM server:

1.      Open the web.config with note pad at  \Program Files (x86)\CA\ITAM\WCF Service

2.      Search for <basicHttpBinding>  change the key from <security mode=”None”> to< security mode=”Transport”

Original text:

      <basicHttpBinding>
        <binding name="BasicHttp" transferMode="Buffered">
          <security mode="None">
            <transport clientCredentialType="None"/>
          </security>
        </binding>
      </basicHttpBinding>

Revised text (change highlighted in bold):

      <basicHttpBinding>
        <binding name="BasicHttp" transferMode="Buffered">
          <security mode="Transport">
            <transport clientCredentialType="None"/>
          </security>
        </binding>
      </basicHttpBinding>

 

3.      Search for <wsHttpBinding> and change the key from <security mode=”None”>to <security mode=”Transport”

Original text:

      <wsHttpBinding>
        <binding name="WsHttp" messageEncoding="Text">
          <security mode="None">
            <transport clientCredentialType="None"/>
          </security>
        </binding>
      </wsHttpBinding>

Revised text (change highlighted in bold):

      <wsHttpBinding>
        <binding name="WsHttp" messageEncoding="Text">
          <security mode="Transport">
            <transport clientCredentialType="None"/>
          </security>
        </binding>
      </wsHttpBinding>

4.      Recycle IIS for the changes to take effect