Setup Web and Database Server

ERP SSL/VPN

If the server environment running Sana and the server environment running ERP are not in the same network it is required to secure the data transfer between these environments.

You have two options, either set up SSL for the ERP Web service or VPN connection between the Web server and ERP server.

• If you set up SSL for the ERP Web service, make sure that you can reach the Web service via the port used by the Web service. If the SSL certificate is self-signed, make sure that this certificate is also added to the trusted root certificates on the Web server.

 NOTE

The server which hosts the ERP Web service must support TLS 1.2. TLS 1.2 is available on Windows Server 2008 R2 and higher. It is not available on Windows Server 2008 by default, but you can install an update to add support for TLS 1.2 on Windows Server 2008.

• If VPN is possible in the infrastructure, make sure it is a VPN tunnel.

 NOTE

If the Sana web store is hosted on Microsoft Azure enabling a VPN connection from the ERP server to Microsoft Azure might cause operational issues. Therefore, if your Sana web store is hosted on Microsoft Azure we recommend to set up SSL for the ERP Web service.

See also:
For more information about ERP Web services, refer to the installation manual for your ERP system.
For more information about how to set up SSL for the ERP Web service, see 'Advanced Installation Topics'.