Configuring CentreStack with SSL Using GoDaddy and Certify the Web on Azure

This guide will walk through the process of purchasing a domain name, and configuring DNS via GoDaddy, then using Certify the web to obtain an SSL certificate on an Azure Virtual Machine with CentreStack installed. 

Pre-Reqs

* Have already Azure VM created. For VM specs, please review the following;

https://support.centrestack.com/hc/en-us/articles/360011422674-Azure-Deployment-Recommendations

* Have a static Public IP assigned to the VM. 

* Port 80 and 443 must be open on your Network Security Group.

Port 80 is required for Certify the Web to perform domain validation.  For further information on this requirement, review (https://docs.certifytheweb.com/docs/http-validation/).

1) Search and purchase a domain name from GoDaddy. For this walkthrough, the domain name called automation.guru will be used.  

2) From My Account screen, click the hamburger icon, and select Domains from the dropdown. 

3) Click your domain name.

4) On the following screen, scroll down to the bottom and select Manage DNS.

5) From the DNS Management screen, select ADD under Records. 

6) Return to the Azure Virtual machine Overview blade, and copy the static Public IP address. 

7) Select A Record from the Type dropdown. For the host, enter @, and paste the public IP on the Points to box obtained from the previous step, then hit SAVE. 

Note:  The wait time after making the new record entry may take up to 48 hours. During the walkthrough, it took around 15 minutes before the redirection started to work, but this may vary. 

8) Return to the CentrStack server and install Certify the web from; (https://certifytheweb.com/).

9) Follow the following article to configure Certify the web. 

https://support.centrestack.com/hc/en-us/articles/360010229973-Obtaining-a-Server-Certificate-from-Let-s-Encrypt-Using-Certify-The-Web

Tip: The YouGetSignal utility can be used to check open external ports. 

https://www.yougetsignal.com/tools/open-ports/

10) Once the validation is successful and the certificate has been bound to port 443, launch the Cluster Manager, and from the Cluster Control panel, click on Worker Nodes. 

11) Click on the pencil icon to edit the worker node.

12) Modify the default external URL and set it to the purchased domain name. 

13) Enforce SSL on login and for Native Clients.

If we now navigate to our URL via HTTP (http://itautomation.guru), it should redirect to (https://itautomation.guru).