Skip to main content

How to Setup NavUserPassword with SSL for Microsoft Dynamics Business Central(NAVISION ERP)


In this blog, I'm attempting to setup basic authentication like NavUserPassword for Business Central On-Premise.
NavUserPassword is an authentication system, where each user have their own UserID and password which is configured inside Business Central itself.


  • Microsoft Dynamics 365 Business Central On-Premise
  • Domain for your VM
  • Understanding of Credential Types in Business Central


1. Setup DNS in Azure VM:
Go to your VM inside Azure to configure DNS.

Click on Configure
Put the URL as you need.

2.  Create a Webserver Instance for Business Central:
New-NAVWebServerInstance to create a Web Server Instance
Adding Web Server Instance with the name LS

3. Create a Self Signed Certificate or get an SSL from Domain provider:
Run the PowerShell script to create a self signed certificate
New Self-Signed Certificate
New Self-Signed Certificate created

After creation/installation of Certificate,
right-click on the Certificate > All Tasks>Manage Private Keys > Add NETWORK SERVICE and allow access to all the users and copy the certificate to Enterprise Trust, Trusted People, Trusted Publisher and Trust Devices folder.

4. Change Credential Type and Adding Thumbprint to Business Central Administration:
Change Credential Type and Add Certificate Thumbprint

5. Change the CredentialsType in navsettings.json files:
This tells Business Central Clients to change the CredentialTypes for the Client.
Goto C:\inetpub\wwwroot\<WEB SERVER INSTANCE>\navsettings.json
Change Client Service Credential in navsettings.json

6. Go to Users in Business Central, insert the Password:
Add Password to Users in Business Central
Note: Step 6 must be done prior to restarting Server Instance, which will change the protocols of communication between Client and Server.

7. Binding your Web Server Instance with SSL / Self-Signed Certificate in IIS:
IIS Bindings for with SSL / Self-Signed Certificate

Restart the Server Instance in Business Central Administration and Webserver instance in IIS. 


NAVUserPassword in WebClient
After inserting the credentials, you will get access to Business Central.
Business Central with NAVUserPasswod and accessible all over the world wide web.


Thus in this blog, we saw how to setup NAVUserPassword for Microsoft Dynamics Business Central.
Importantly, we need to correctly setup SSL Certificate and how to bind with IIS.
In the next blog, I will show how to setup Single Sign-On(SSO) in Microsoft Dynamics Business Central and connect Business Central with Azure AD to login with your Office 365 credentials.

Despite all following these steps if you have issues starting Server Instance then refer to my blog HERE


Unknown said…
Hi Olister,

How to apply certificate if we have 4-tier architecture. I completed the installation & configuration as Server1 (SQL), Server2(NST), Server3(IIS,Web) & Server4(RTC Client). All are working well with windows authentication. Now I have to change the authentication to NavUserPassword. For NavUserPassword I need to apply SSL, here I am not sure that how many SSL certificate needed and how to configure?

See this blog describing the installation & configuration

Manish Sinha

For NavUserPassword it is not mandatory to use SSL unless you want to access your webclient over the Internet and not through local connection.
For SSL, you need to make sure that your SSL pings to the URL that you wan to access after which your NAVUserPassword with SSL will work.

Check if you can get NavUserPassword working without SSL in your LocalMachine.

Unknown said…

i follow thios article and has a uknown error when i will log in to NAV ... error: "An error has occurred" and I can only log out.

Whats this error ?

Kind regards
TxemaMLL said…
Same error here on a 17.2 version

Popular posts from this blog

Understanding and How to use APIs Business Central - 2

Introduction: In my last blog post ( Business Central API -1 ) on Creating API in Business Central, we discussed all the commonly used properties of the page, query, and controls like field and data-item. In today's blog, we will be diving deeply into the validation of the data passed through the API endpoint, how it enters into the source tables and is manipulated to be inserted/modified into single or multiple tables. Also, I will be demonstrating how APIs are to be used. Pre-requisites: Microsoft Dynamics Business Central (SaaS) VS Code( ) AL Language Extension( ) API V1 from Business Central On-Premise DVD Books & References: API V1 from Business Central On-Premise DVD API(V1.0) for Business Central ( Click Here ) API(Beta) for Business Central ( Click Here ) Theory: Understanding API in Business Central 1. BINDSUBSCRIPTIONS: Use to trigger IntegrationEvent for the Codeunit stated

Enum Object in Business Central - How to create and how to extend!

Introduction: Since the dawn of Business Central Era (2nd April 2018 - Today), there are many new data types introduced by Microsoft. One such data type is Enum(Enumeration). Essentially, what enumeration is having a single select value with multiple options at a given time! Well, I know what your thinking what about the 'Option' data type. Anyways, enough of talking let's just dive in! Disclaimer:   The knowledge in this blog is true and complete to the best of authors and publishers knowledge. The author and publisher disclaim any liability in connection with the use of this information. Pre-requisites: Microsoft Dynamics Business Central (SaaS or On-Premise) VS code with AL Language extension Code: 1. Enum as an Object: Just like Tables and Pages, Enum behaves like an Object. Enum Object Note that Extensible means that the Enum Object can be extended in another module. By default, this property is set to TRUE. Enums created in a module(App), ca

Creating APIs in Business Central - 1

Introduction: While writing a blog on Automated Testing in Business Central, I was going through sample apps provided by Microsoft and realized that the complexity is nowhere close to what examples Microsoft has provided on In this blog, I will try to explain how APIs work and how to be creative with the implementation. Also, an API which were in beta are finally out with version V1.0 in the April 2019 release let's see some important key things from development aspects. This blog is going to be theoretical one kindly bear with me. Pre-requisites: Microsoft Dynamics Business Central (SaaS) VS Code( ) AL Language Extension( ) API V1 from Business Central On-Premise DVD Books & References: API V1 from Business Central On-Premise DVD API(V1.0) for Business Central ( Click Here ) API(Beta) for Business Central ( Click Here ) Solution: Key Requirements: API source table