Enabling SSL Support on the CxManager

Prepare a CA certificate for the Checkmarx Software Exposure Platform Server (in a distributed deployment - for CxManager), signed by a third-party certificate authority such as VeriSign , and install it on the Server or CxManager.

From the Start menu, select All Programs. Click Accessories, and then click Run. The Run window is displayed.

In the Open box, type inetmgr and then click <OK>. The IIS Manager window is displayed.

Select Default Web Site from the Connections panel.

Select Bindings from the Actions pane. The Site Bindings window is displayed.

Click <Add>. The Add Site Bindings window is displayed.

Under Type, select https.

Select SSL Certificate and select your pre-installed certificate from the list.

Click <OK> and then <Close>.

In the Connections pane, double-click Default Web Site.

Select CxWebClient and double-click on SSL Settings.

Select Require SSL and click Apply from the Actions pane.

Go to C:\Program Files\Checkmarx\CheckmarxWebPortal\Web, open the web.config file for editing and using the Search tool, search for "CxWSResolver.CxWSResolver".

Change the value "http://" to "https://" and replace the value "localhost" (if available) with your pre-installed certificate's <name/subject>.

Right-click on the Server (highest level in the hierarchical tree) and select Stop from the drop-down. Once stopped, right-click on the Server again and choose Start.

Update URLs in the database.

If the post-installation utility is not installed, open the SQL server using SQL Server Management Studio (SSMS) and execute the following SQL queries:

To retrieve values:

select * from [CxDB].[dbo].[CxComponentConfiguration]WHERE [Key] = 'IdentityAuthority';
select * from [CxDB].[dbo].[CxComponentConfiguration]WHERE [Key] = 'CxSASTManagerUri';
select * from [CxDB].[dbo].[CxComponentConfiguration]WHERE [Key] = 'Webserver';
select * from [CxDB].[accesscontrol].[ConfigurationItems]WHERE [Key] = 'SERVER_PUBLIC_ORIGIN';

To update values:

USE [CxDB]
GO 

UPDATE [dbo].[CxComponentConfiguration]
   SET [Value] = 'https://<FQDN>/CxRestAPI/auth'
 WHERE [Key] = 'IdentityAuthority'
GO 

USE [CxDB]
GO 

UPDATE [dbo].[CxComponentConfiguration]
   SET [Value] = 'https://<FQDN>'
 WHERE [Key] = 'CxSASTManagerUri'
GO

USE [CxDB]
GO

UPDATE [dbo].[CxComponentConfiguration]
   SET [Value] = 'https://<FQDN>'
 WHERE [Key] = 'Webserver'
GO

USE [CxDB]
GO

UPDATE [accesscontrol].[ConfigurationItems]
   SET [Value] = 'https://<FQDN>'
 WHERE [Key] = 'SERVER_PUBLIC_ORIGIN'
GO

Then restart the Cx services.

In the SAST Web Portal interface, go to Settings > Application Settings > General. The General Settings window is displayed.

Click <Edit> at the bottom of the page.

Enter your Server URL (e.g., https://checkmarx.corp.net) into the Web Server Address field.

Click <Update> to save the changes.

The CX_ES_ACCESS_CONTROL_URL environment variable must be updated from HTTP:// to HTTPS://, and the hostname must be replaced according to the certificate.