We will add our configuration into the section “VirtualHost”, like this example:
ProxyPreserveHost On
ProxyPass “/ppss” “http://192.168.0.19:8080/ppss”
ProxyPassReverse “/ppss” “http://192.168.0.19:8080/ppss”

So in the example above we have added the configuration into the SSL configuration file (default-ssl.conf), meaning that we will terminate SSL on the Apache server.
And then use HTTP for the internal communication to backend.
The configuration will react on incoming request to /ppss and redirect to backend server with ip 192.168.0.19 on port 8080.

The Apache service needs to be restarted after the changes.

***************   END of section “Configure on Linux” ***************

2. Configure on Windows

Server version used for this instruction was Windows Server 2016.

Download and install Apache HTTP server on Windows

******************** Important! ********************
There are several sites where you can download an installer for Apache HTTP server, www.apachelounge.com is one of them and well known. After you have downloaded and before you attempt to install, you should make sure that the installer is is intact and has not been tampered with. Use the PGP Signature and/or the SHA Checksums to verify the integrity. PhenixID is not accountable for the content or availability of these websites or sources where you can download Apache software. PhenixID gives no guarantee, nor does it accept any responsibility for the content, data, advices, announcements, software, products or other material on these websites or sources.
*****************************************************

1. Download the latest stable version of Apache HTTP server for Windows.
   For this document we used version 2.4.25
   1. Go to https://www.apachelounge.com/download/
   2. Download Apache HTTP server for Windows
2. Download Microsoft prerequisite for above Apache HTTP server version
   1. Download  “Microsoft Visual C++ 2015 Redistributable Update 3”
   2. https://www.microsoft.com/en-us/download/confirmation.aspx?id=53840
3. Install Apache HTTP server and Microsoft prereq on Windows
   1. Install “Microsoft Visual C++ 2015 Redistributable Update 3”
      1. Run vc_redist.x64.exe
      2. Run through and complete installation wizard
   2. Unzip httpd-2.4.25-win64-VC14.zip
   3. Open the folder and copy the folder /Apache24 to c:/ (or other preferred drive)
   4. C:\Apache24
4. Install Apache HTTP Server as a service
   1. Open Command Prompt
   2. Type “cd Apache24/bin” and press Enter
   3. Type “httpd.exe -k install” and press Enter
5. Verify that Apache HTTP Server was installed succesfully
   1. Open Services (services.msc)
   2. Look for service named Apache2.4
   3. Start service

Disable HTTPS for URI´s on PhenixID server

1. On your PhenixID server installation, open boot.json (in Server/config folder)
2. Find and configure as below (note: two different places in boot.json)
   “name”: “com.phenixidentity~phenix-prism”,
   “enabled”: “true”,
   “config”: {
          “_auth_redirect_url”: “/config/authenticate/config”,
          “base_url”: “/config”,
          “ssl”: “false”,
          “port”: “8080”, “name”: “com.phenixidentity~auth-http”,
   “enabled”: “true”,
   “config”: {
          “ssl”: “false”,
          “port”: “8080”
                     }
3. Save boot.json and restart PhenixID service

Load appropriate modules in httpd.conf

1. Open httpd.conf
   • C:\Apache24\conf
2. Enable following modules by removing the #
   LoadModule proxy_http_module modules/mod_proxy_http.so
   LoadModule proxy_module modules/mod_proxy.so
   LoadModule proxy_connect_module modules/mod_proxy_connect.so
   LoadModule ssl_module modules/mod_ssl.so
   LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
3. Save file httpd.conf
4. Restart Apache HTTP server and verify

Include httpd-ssl.conf in httpd.conf

1. Open file httpd.conf
2. Locate following lines and make sure include line is NOT disable.
   Correct configuration should look like follows:
   # Secure (SSL/TLS) connections
   Include conf/extra/httpd-ssl.conf
3. Save file httpd.conf
4. Restart Apache HTTP server and verify

Enable proxy in httpd-ssl.conf

1. Open file httpd.conf
2. Go to bottom of file and add:
   # Enable Proxy
   ProxyPreserveHost On
   # Incoming. Example host and port, http://PAS_SERVER:8080/
   # Only enable below what you like to be accessed from outside
   ProxyPass “/config” “http://PAS_SERVER:8080/config”
   ProxyPassReverse “/config” “http://PAS_SERVER:8080/config”
   ProxyPass “/mfaadmin” “http://PAS_SERVER:8080/mfaadmin”
   ProxyPassReverse “/mfaadmin” “http://PAS_SERVER:8080/mfaadmin”
   ProxyPass “/selfservice” “http://PAS_SERVER:8080/selfservice”
   ProxyPassReverse “/selfservice” “http://PAS_SERVER:8080/selfservice”
   ProxyPass “/authenticate” “http://PAS_SERVER:8080/authenticate”
   ProxyPassReverse “/authenticate” “http://PAS_SERVER:8080/authenticate”
   # The two below are for PhenixID One Touch activation
   ProxyPass “/pki” “http://PAS_SERVER:8080/pki”
   ProxyPassReverse “/pki” “http://PAS_SERVER:8080/pki”
   ProxyPass “/push” “http://PAS_SERVER:8080/push”
   ProxyPassReverse “/push” “http://PAS_SERVER:8080/push”
   ProxyPass “/saml” “http://PAS_SERVER:8080/saml”
   ProxyPassReverse “/saml” “http://PAS_SERVER:8080/saml”
3. Save file httpd.conf
4. Restart Apache HTTP server and verify

Disable port 80 on Apache HTTP server

For security reasons you might like to disable http or port 80 or maybe you disable this access is configured in your firewall.
To disable port 80 on Apache HTTP server:

1. Open file httpd.conf
2. Find “Listen 80”
3. Remove line or add a # in start of line
   # Listen 80
4. Save file httpd.conf
5. Restart Apache HTTP server and verify

Add SSL certificate to your installation

Please visit PSD1078

Verify configuration

Open a browser and go to your FQDN and verify your configuration
e.g. https://server_name.phenixid.local/config/