Milestone XProtect Mobile Server - How to Automate SSL Cert with Certy the Web / Let's Encrypt

On the Milestone server.

Install Certify the Web (6.0.15.0 works for sure)

Setup the auto renew on the Default Website

Create a PowerShell script to update the http ssl certificate on a scheduled task.

c:\scripts\updateMileStoneSSL.ps1

$newhash = netsh http show sslcert | select-object -index 5

$newhash = $newhash -replace '\s',''

$newhash = $newhash.Split(":") | select-object -index 1

Write-Output "netsh http update sslcert ipport=0.0.0.0:8082 appid='{00000000-0000-0000-0000-000000000000}' certhash=$newhash"

$result = netsh http update sslcert ipport=0.0.0.0:8082 appid="{00000000-0000-0000-0000-000000000000}" certhash=$newhash

Write-Output $result

Restart-Service -Name 'Milestone XProtect Mobile Server'

Add the daily scheduled task

Program/Script: Powershell

Args:  -NoProfile -ExecutionPolicy Bypass -File "C:\scripts\updateMilestoneSSL.ps1"

Start in: c:\scripts

Additionally make sure the port forwards/services are setup from the outside in.  Example on a FortiGate

Policy & Objects -> Firewall Policy

Policy & Objects -> DNAT & Virtual IPs