# Securing the Access Information Center Made Easy

**URL:** <https://community.netwrix.com/t/securing-the-access-information-center-made-easy/113801>\
**Category:** Access Analyzer Show & Tell\
**Created:** [September 9, 2025, 9:43pm UTC](https://community.netwrix.com/t/securing-the-access-information-center-made-easy/113801 "2025-09-09T21:43:25Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![kurt.gerth](https://avatars.discourse-cdn.com/v4/letter/k/c37758/32.png) [@kurt.gerth](https://community.netwrix.com/u/kurt.gerth)\
**Post date:** [September 9, 2025, 9:43pm UTC](https://community.netwrix.com/t/securing-the-access-information-center-made-easy/113801/1 "2025-09-09T21:43:25Z")

</div>

# Solution Download

[SecureAccessInformationCenter.zip](https://community.netwrix.com/uploads/short-url/58ua9iLXmHToe3g9UYtRiMXksvH.zip) (8.3 KB)

# Summary

This is a companion post to **[Securing the Web Console Made Easy](https://community.netwrix.com/t/securing-the-web-console-made-easy/111204)**.

The **Netwrix Access Information Center** ( **AIC** ) web interface is not initially configured to use HTTPS, or a new certificate needs to be applied, requiring several manual steps to enable secure communication.

# Problem

Even when the AIC is only accessed within an internal corporate network, enabling HTTPS is a standard security requirement.

As with **[Securing the Web Console](https://docs.netwrix.com/docs/accessanalyzer/12_0/install/application/reports/secure)** to leverage **SSL** , a common challenge with the **AIC** is configuring its web interface to use **SSL/TLS** for encrypted communication.

When we initially **[Install the Access Information Center](https://docs.netwrix.com/docs/accessinformationcenter/12_0/installation/install)** in version 12.0 and later we do have the option to configure **SSL/TLS** , however we do not have this as an option in older versions which require manual configuration. Additionally, when the time comes to update the certificate in version 12.0 this would require an uninstall/reinstall of the **AIC**.

# Solution

The **Secure Access Information Center** job mirrors the automation I created for the Published Reports Web Console, **[Securing the Web Console Made Easy](https://community.netwrix.com/t/securing-the-web-console-made-easy/111204)**.

It performs all required steps in one pass:

1. Updates the AIC’s _AccessInformationCenter.Service.exe.Config_ file with the new HTTPS port.
2. Binds the supplied certificate thumbprint to that port.
3. Configures the **Netwrix Access Information Center** service to run as a specified service account with the credentials passed via a connection profile.
4. Creates or refreshes the URL ACL so the service account can reserve the endpoint.
5. Restarts the AIC web service so the changes take effect immediately.

Run the job whenever a fresh certificate is issued and the entire SSL lifecycle is handled without much manual intervention.

# Instructions

1. **Certificate**  
Import the certificate you received from your CA into the Local Machine store.  
Launch the Certificate Import Wizard and choose “Automatically select the certificate store …” so Windows places it in the Local Computer store.  

2. **Service Account**  
The AIC service account must be granted “Log on as a service” in the Local Security Policy (secpol.msc → User Rights Assignment).  

3. **Connection Profile**  
If you don’t already have a profile created for the service account, you’ll need to **[Create a Connection Profile](https://docs.netwrix.com/docs/accessanalyzer/12_0/admin/settings/connection/create/)**.  
After a connection profile is created, you’ll need to assign it to the job. Right-click the **SecureAccessInformationCenter** job → Properties → Connection tab, choose “Select one of the following user-defined profiles”, pick the profile from the drop-down and click OK.  

4. **Configuration**  
The job exposes two parameter settings:

- **Certificate thumbprint to bind** – paste the thumbprint you copied earlier.
- **Port to bind certificate** – defaults to 481; adjust if your environment uses a different port.  
 ![vmware_UfghyWps2Z](https://netwrix1.discourse-cdn.com/netwrix/original/2X/7/7ed24c51994d02b36216d98406070e3973817529.png)

1. **Run**  
Hit Run Now (or right-click → Run Job).  
 ![The image displays an overview page for a job titled 'Secure Access Information Center,' featuring options to run the job immediately, schedule it, open the folder, or view the log. (Captioned by AI)](https://netwrix1.discourse-cdn.com/netwrix/original/2X/7/779760d4d85b0b11f6aa5143424c102ed14c7e74.png)  
When the certificate expires, import the replacement, update the thumbprint in the job parameters, and run it again—no further manual steps required.