Server and HTTPS
Server and HTTPS is who uses Ledger Doctor Partner and how they reach it. It's for admins, and every change goes in the security log.
Who can reach it
- This computer only: open http://localhost:5190/ on this computer. Nothing listens on the network.
- Computers on my network: consultants open it from their own computers and sign in with Windows. Pick the address people use: the computer name (silent sign-in on domain computers, no IT setup), or a full name (IT adds it to the Local intranet zone for silent sign-in), and any other names, such as an alias in DNS.
Check the names checks each one leads to this server. Save asks first, on the page, then restarts the application in a few seconds.
The application can't change Windows Firewall or the Start menu shortcut itself: when it says so, run setup on the server and choose Update.
HTTPS certificate
With HTTPS on, everything between browsers and the server is encrypted, and the old http:// address sends people to https://. Choose one:
- Make one for this server: from the application's own certificate authority. It renews itself 30 days before it expires. Each computer trusts the authority once.
- Upload a .pfx: one you bought, or one IT issued. The password is used once to open it and isn't saved.
- Pick one from this server's certificate store (Local Computer, Personal).
The page shows the certificate, the names it covers and when it expires, and warns 30 days before. Turn HTTPS off asks first. See HTTPS in the install guide.