Applies to: Kyvos Enterprise  Kyvos Cloud (SaaS on AWS) Kyvos AWS Marketplace

Kyvos Azure Marketplace   Kyvos GCP Marketplace Kyvos Single Node Installation (Kyvos SNI)

This section details how to configure HTTPS connectivity for Kyvos using an Azure Application Gateway to securely access the Kyvos Web Portal through SSL certificates and encrypted communication.

For HTTPS Connectivity

Prerequisites

To configure the Azure Application Gateway for use with Kyvos, you must have the following.

1. Kyvos web application certificate (.cer file).

2. Certificate for application gateway URL (.pfx file).

3. Azure portal users should have the right to create an Azure Application Gateway.

4. Public subnet for Application Gateway.

Configuring Web Portal HA from Azure portal

This section explains the steps to be performed to configure HTTPS Load balancer:

1. Sign in to your Azure account with Admin credentials. 
   or
   A user with the right to create an Application Gateway can sign in to the Azure portal. 

2. Provide information on the Basics tab page.
   
   

   Open

   

    

3. Click the Frontends tab and enter the following details:

   1. Public IP address: To open the URL for business users.

   2. Add new public IP: Use this option if existing IPs are not available.
      
      

      Open

      

4. Click the Backends tab and provide details for the backend pool.

   1. Provide the name of the backend pool.

   2. Select the Target type as IP or FQDN.

   3. Provide FQDN of Kyvos web portal machines.

5. Click the Configuration tab and provide details for:

   1. On the Add a routing rule page, define rules for Listener.
      
      

      Open

      

   2. On the Add a routing rule page, define rules for Backend targets.

      1. Select the created backend target from the list.

      2. Add the HTTP setting in the next steps.

      3. Provide the Kyvos web portal .cer file and the required details, as shown in the following figure.

      4. Enable Cookie-based affinity for session stickiness.

         Open

         

   3. Click Add and then click the Save button.

6. Click the Next button and provide the required tags for the Application Gateway.

7. Click Create.

8. After the resource is created successfully, go to Health Probe and add a path as /Kyvos. 

   Open

   

9. Go to overview and copy the public IP or the hostname.