NAV 2015 App connection problem

clarasdk

Hi

I have installed the new NAV 2015 on my Surface 3 and the Chronus demo is running fine.

I can run the web version of the app in a browser no problem. However, I cannot seem to make it Work in the app version.

As far as I can see on MSDN I need to have the web version running with HTTPS so I have made a self-signed certificate for that and I am running the page on port 8081. This also works fine from the browser but still not in the app....

For the web browser I can access the page with https://Computername:8081/DynamicsNAV80 ... ablet.aspx
What should I enter in the service name for the app?

Has anybody made the app version Work with the dynamicsnav80 demo installation and can help me with some tips?

ara3n

In Directions in US, they mentioned that it needs to have a valid certificate. It doesn't work with self signed certificates. You have to purchase a valid certificate.

clarasdk

ara3n wrote:

In Directions in US, they mentioned that it needs to have a valid certificate. It doesn't work with self signed certificates. You have to purchase a valid certificate.

Hmmm Even for a local demo? Ok.... Will have to investigate that. Does not make setting up a demo maschine any easier....

Kowa

For an Android tablet you can try this method along the lines shown here using a self-signed certificate for CACert:
http://wiki.cacert.org/FAQ/ImportRootCert#Android_Phones_.26_Tablets
One of our members on msdynamics.de got the app working that way.

ara3n

For demo purposes, you can just open a browser on a tablet and enter the address.

Use Http instead of Https.

The NAV App is basically a browser.

clarasdk

ara3n wrote:

For demo purposes, you can just open a browser on a tablet and enter the address.

Use Http instead of Https.

The NAV App is basically a browser.

I know I have that up and running all ready.

I do not like going out to a customer telling about all the new cool features of NAV 2015 including the APP and then I have to show it in a browser. No matter what I say, the customer will think that either the app is not working or that it is very complicated to setup. Worst case even both. That is the general outcome I aim for when demoing the system. I have a nice Surface pro 3 with everything running, NAV, our vertical, all client types etc. and that make a killer demo.

I found this on msdn that I will investigate a little more today:
http://msdn.microsoft.com/en-us/library ... 5(v=nav.80).aspx

In the text, they link to a section about creating self-signed security certificates so it must be somehow possible.

It also seems that someone has made it Work on Android also...

tinoruijs

clarasdk wrote:

It also seems that someone has made it Work on Android also...

Yesterday I saw a live-demo of the tablet-client on an Ipad. Worked nice!

clarasdk

tinoruijs wrote:

clarasdk wrote:

It also seems that someone has made it Work on Android also...

Yesterday I saw a live-demo of the tablet-client on an Ipad. Worked nice!

I am pretty sure that it Works nice on IOS, Android and Windows Surface.

My problem is to make it work with a self-signed certificate (at least I think that is the problem, but could be something else alltogether). Therefore I am looking for somebody who has the app up and running on the chronus demo.....

tinoruijs

I hope I can soon share my positive experience with the app, because I want to demonstrate the app next week. #fingerscrossed

Yogi1983

Anyone found a solution for this already? I'm very curious if it's possible to get some "demo" certificate or something like that.

clarasdk

Not yet. I am going to EMEA directions next week, so I hope to find some Microsoft brains to pick. If nothing else to get a clear statement if it is possible or not....

gedas

Self-signed certificates works in windows tablets - run mmc and import certificate to root folder.
However for Android and Apple required "real" certificates.

ara3n

here is a how to for self singed certs.

http://blogs.msdn.com/b/nav/archive/201 ... icate.aspx

clarasdk

Yea it is nice that they posted this link Had a good talk with Microsoft today at EMEA directions and they have heard alot of questions on this topic so that was why they did the post.

They are also looking into making it possible to let the app accept normal HTTP webservices if the web service is running on the sam maschine as the app. So that it is possible to do a demo setup on a surface pro where everything is running on one box. I hope they make that work as it would make things alot easier

shepardassoc

I'm in the same boat. I've got everything setup and running but just can't get the self-signed cert. to work with the app. I've been hammering on it for a week and just don't seem to be getting anywhere. I guess it's time to pony up and pay for a full cert.

Brandon Weber
NAV Developer

MikeBC_[MSFT]

Thankyou for sharing your experiences and concerns.
I would like clarify app connectivity:

For testing or demoing of the app, self-signed certificates can be used. These are free but require some additional effort as they must be installed to each device. I highly recommend following instructions on our recent blog post here. If you still encounter issues, make sure you are entering the correct service URL in the app ([url=https://]https://[/url]<yourServer>/<yourWebServerInstance>), and have correctly configured your Dynamics NAV web server to use the certificate. If your server is not configured with default SSL port 443, make sure you specify your custom port number as <yourServer>:<portNumber> in the URL.

In production, I recommend customers purchase a wildcard certificate from a publicly trusted certificate issuer. By doing this, the certificate can be deployed to the Dynamics NAV web server(s) and all devices are ready to connect to it securely with no additional effort. If you want low-effort and a great user experience, this is the way to go. Most apps you use today which connect to some service do the same. Think of any web shop you have visited recently: this most likely had an https address, did not display a certificate warning, and did not require you to install any certificate to complete your purchase; your NAV users expect that same experience.

best regards,
Mike Borg Cardona
Program Manager, Dynamics NAV

shepardassoc

Thanks Mike.

I did get the self-signed cert to work on windows tablets. The one key is to follow the instructions from the NAV Blog Mike mentions in the previous post. Also a big piece to the puzzle that should be highlighted, when added the cert to the tablet make sure you install it for the local machine. When creating the cert using the instructions from the NAV Blog you will see one of the parameters states –StoreLocation LocalMachine. Export the cert via the instructions, copy it to the tablet desktop, right click on the cert and select Install Certificate, install it for the local machine to the trusted root auth. I also installed the cert again and selected the personal certificate just to be sure.

Hope this helps.

Brandon Weber
NAV Developer

stefang

Has anyone managed to get a self-signed certificate working with iOS? I have been trying to follow the instructions on the NAV Team Blog, everything works fine in a browser but the App is no working on iOs?

Stefán Georgsson
NAV developer / consultant

PrebenRasmussen

Yes, a self-signed certificate works fine for me in iOS (iPAD) using the all new APP.
I created the certificate on my laptop and then send it to the iPAD by mail.

IF you were to try the exact same URL (https://hostname/DynamicsNAV80/WebClient) in the browser of the iPAD...
1 What error do you get?
2 Does it ask for credentials?
3 Does it warn about certificate?

dave_c

Has anyone else found these connection issues are fixed by connecting to the web server from another machine? We've got two demo machines setup here A and B. The app on A can connect to the server on B and the app on B can connect to the server on A. But A cannot connect to A and B cannot connect to B. If anyone has seen and fixed a similar issue I would be very interested as it would be nice to be able to demo the app with only one machine!

stefang

Hi
I have created a self certificate, mailed to my ipad and installed there. When I open the exact same path on the browser (Safari) I get a question, "The identity of the server can not be verified... CANCEL, DETAILS, CONTINUE". This happens even though I have installed the certificate on the ipad.

Of course, if I press Continue in Safari, I have suppressed the warning.

But I guess there is smt wrong with my certificate, I just cant figure out what it is. The certificate is for my pc <your site name> = my_pc
in: New-SelfSignedCertificateEx –Subject “CN=<your site name>” –IsCA $true –Exportable –StoreLocation LocalMachine –StoreName My

Should it rather be my_pc/dynamicsnav80/webclient ?

PrebenRasmussen

No. you must not include folder names in the CommonName.
Use either the netbios name of your computer or the FQDN if you are joined to a domain.

Check that the certificate is listed in Settings/General/Profiles on the iPad and that is is confirmed (must be green text).
If you have added several certificates. Delete them all and retry everything from scratch.
Same thing with your Windows machine. Delete duplicate entries in Personal and Root stores.
Check that the certificate is added to both Personal and Root on you machine.
Check that the certificate is still added to the website https binding.
Check that the same URL in a browser on your Windows machine is working without a red background in the address box.

Iqbal_Febriano

I'm still getting "Could not connect" error message when trying the app to connect to localhost, am I missing something ? I run standard demo installation on my Surface Pro and already produced and installed the certificate as guided in the msdn blog

Thanks in advance

PrebenRasmussen

@Iqbal:
Check that the exact same URL in a browser on your Surface Pro machine is working without a red background in the address box?

Iqbal_Febriano

The certificate is deemed valid (no red bar on the address box) for both the web client and tablet.aspx

PrebenRasmussen

Are you using netbios name or fqdn?
Try localhost instead if you run everything on the same box.
Try SHA256 algorithm and 2048 key length.

Iqbal_Febriano

I already tried using localhost and netbios name, and I don't think using fqdn will help either, and I believe it's not just me who experience trouble when trying connecting via NAV App in the same box. I have no problem when connecting to other machine, nor do others when connecting to my computer

PrebenRasmussen

Are the others using the same type of equipment/windows to connect?

jamesliangtw

Hi Mike,
Do I need to open the 7047 SSL checkbox when I use the App ? and how to find out the "Web Server Instance" name ?
For example, I install all in my surface pro 3, does the Web Server Instance is this pro 3 name ?

Thanks

jamesliangtw

Another question, I can use iPad Safari to open https://***.***.com/DynamicsNAV80.WebClient after install certificate file,
In Nav APP of iPad. in Service name, I type in https://***.***.com/DynamicsNAV80 , but get "Could not connect to the server". does anybody can help ?

Jaana

Hi all,

If you have followed the certification process and you can successfully log into the tablet site via a normal browser
[url=https://]https://[/url]<server>/<instance>/WebClient/tablet.aspx

but you still get a connect to the tablet via
[url=https://]https://[/url]<server>/<instance&gt;

with a connection error try this script in cmd (I ran as administrator but am not sure if that is required)

CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.dynamicsnav_8wekyb3d8bbwe

There is an issue if you have installed all components on your device and this will solve it. This should be solved in CU1
Now - I still got an issue afterwards... I don't get the connection error anymore but for some reason the tablet client asks for authentication even tough my service is set to windows authentication (which works with all other clients). When I enter credentials the tablet client goes crazy flashing and I have to kill the task and delete the password information from windows.

Anyone who can try to get past that point?

Jaana