SSL+ Project Server 2003

[TroyS]

Initially, the Project Server 2003 was installed without SSL implemented; it
wasn't identified as being required.

After deploying the Project Server 2003 solution, there are now inquiries
about using SSL and enabling it.
Can someone chime in about whether or not SSL can be enabled after Project
Server 2003 is installed and/or where to find more information about this?

I believe it will require a complete re-install in order to enable SSL but i
could be wrong and am looking for a definitive answer.

thx.

 

[Gary L. Chefetz [MVP]]

Troy:

What is the context for the SSL requirement? In-house or Extranet? If it's
the latter, I'd suggest putting up another front end.

 

[TroyS]

Gary,
The SSL is extranet access ....They want to be able to access via internet
using https:// without having to create vpn connection

The have vpn capability and can then access PWA and/or Project Pro 2003.
However, SSL wasn't enabled in the Project Sever installation.

They have ISA 2004 and have published the PWA site out under a different URL
and this does prompt for credentials. However, i don't know enough about ISA
vs SSL to comment on limitations about either approach or a combination of
both....etc, etc.

So if they want to use https:// then they would need to complete a brand new
install.....that seems to be the question. but if you have other insights or
know of any kb articles discussing such or other sites/sources, I'd be very
interested in reviewing this in order to pass on to client. thx.

 

[Kevin W Flanagan]

The easiest way we have opened it up to outside users in the past is through
utilizing CITRIX. Citrix will pass their credentials along and we did not
ever have any security issues.

 

[Gary L. Chefetz [MVP]]

Troy:

My recommendation is strictly for security purposes. For this type of
access, which should be used for Project Web Access and SharePoint only, you
should put an additional Project Server/WSS front end, talking to the same
databases, in the DMZ.

 

[TroyS]

Thanks for everyone's input. this helps

Gary,
The SSL is extranet access ....They want to be able to access via internet
using https:// without having to create vpn connection

The have vpn capability and can then access PWA and/or Project Pro 2003.
However, SSL wasn't enabled in the Project Sever installation.

They have ISA 2004 and have published the PWA site out under a different
URL and this does prompt for credentials. However, i don't know enough
about ISA vs SSL to comment on limitations about either approach or a
combination of both....etc, etc.

So if they want to use https:// then they would need to complete a brand
new install.....that seems to be the question. but if you have other
insights or know of any kb articles discussing such or other
sites/sources, I'd be very interested in reviewing this in order to pass
on to client. thx.