Resolving the "Site is not secure" browser warning for ADSelfService Plus
Issue description
When users access the ADSelfService Plus portal in a web browser, the site may be flagged as Not Secure or trigger a security warning. This can discourage end users from logging in, reduce trust in the application, and disrupt workflows, such as password resets or self-service account unlocks.
Possible causes
This error typically occurs in ADSelfService Plus due to SSL misconfigurations. Common reasons include:
- Expired SSL certificate: The installed SSL/TLS certificate is no longer valid and has expired.
- Invalid SSL certificate: The wrong certificate is bound to the ADSelfService Plus web server.
- Self-signed certificate: The default, self-signed certificate from ADSelfService Plus is not trusted by client browsers.
- Improper reverse proxy configuration: A valid SSL certificate has not been applied on the reverse proxy, even though ADSelfService Plus itself is configured correctly.
Prerequisites
- You need administrator access to the ADSelfService Plus server and web portal.
- You must have a valid SSL certificate file from a trusted Certificate Authority (CA). The certificate should be for the exact hostname users will use to access the portal.
Resolution
1. If accessing ADSelfService Plus directly:
- Bind a valid and trusted SSL certificate issued by a trusted CA in ADSelfService Plus.
- Ensure the certificate’s Common Name (CN) or Subject Alternative Name (SAN) matches the URL used to access ADSelfService Plus (e.g., ssp.yourcompany.com).
- Restart ADSelfService Plus after certificate installation to apply changes.
2. If a reverse proxy is used:
- Configure your reverse proxy server to use a valid SSL certificate. This process varies depending on the proxy software you use.
- Ensure the proxy is configured to serve HTTPS connections externally.
- The internal connection between the reverse proxy and ADSelfService Plus can remain on HTTP, while users access the application securely via HTTPS.
Validation and confirmation
After applying the SSL certificate,
- Clear your browser's cache to ensure it fetches the new certificate information.
- Access the ADSelfService Plus portal using the correct https:// URL.
- Check the address bar. You should now see a padlock icon đź”’, indicating a secure and trusted connection.
Related topics and articles
How to reach support
New to ADSelfService Plus?
Related Articles
ADSelfService Plus product startup issues
What do you need to know before troubleshooting You need to have administrator access to ADSelfService Plus. When you experience an error with ADSelfService Plus, check if these prerequisites are satisfied: Install ADSelfService Plus as a service ...Change the default ADSelfService Plus admin password to improve security
Description By default, ADSelfService Plus has default admin account. This account has all the privileges and access to the ADSelfService Plus admin console. The default admin account uses the word admin as the username and the password. It is highly ...Multi-factor authentication techniques in ADSelfService Plus
Let's take a look into the various authentication methods supported by ADSelfService Plus for enterprise multi-factor authentication (MFA). Why should you use MFA? Authentication based solely on usernames and passwords is no longer considered secure. ...Configuring high availability in ADSelfService Plus
ADSelfService Plus utilizes automatic failover to support high availability in case of system and product failures. Essentially, this means that when the ADSelfService Plus service on one machine fails, another instance of ADSelfService Plus running ...Completely rebrand ADSelfService Plus to match your organization’s requirement
Description You can completely overhaul ADSelfService Plus with your own organization’s logo, images, theme color, etc. ADSelfService Plus gives you complete control when it comes to renovating the look and feel of the web portal. The net result is ...