Skip to content

Commit 262124d

Browse files
Update service binding info
1 parent a804b5c commit 262124d

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

docs/backgroundservice.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ To check the log for this service, review `C:\ProgramData\Certify\logs\service.e
99

1010
## Port 9696 is the default service port
1111

12-
By default the background service runs a local http API server on port 9696 for the UI to talk to (bound to localhost and requiring windows authentication). _Do not open this port to external traffic on your firewall._
12+
By default the background service runs a local http API server on port 9696 for the UI to talk to (bound to local loopback 127.0.0.2 and requiring windows authentication). _Do not open this service to external traffic on your firewall._
1313

1414
## Custom configuration and Troubleshooting "..service not started" error
1515

@@ -32,7 +32,7 @@ If the default port 9696 is already in use however you can manually specify the
3232
"port": 9696
3333
}
3434
```
35-
Any local IP (or `localhost`) can be used, local loopback addresses are strongly recommended so that remote access is not possible.
35+
Any local IP, loopback address (or `localhost`) can be used, local loopback addresses are strongly recommended (ip range 127.*) so that remote access is not possible.
3636

3737
For example an alternative configuration might be:
3838

@@ -62,7 +62,7 @@ To operate properly the background service needs to be able to register an http
6262

6363
In some cases you need to explicitly allow the service to listen as an http service on the localhost IP address. To do so run the following command from the command line as an Administrator, substituting your choice of listening IP address and port:
6464

65-
`netsh http add urlacl url=http://127.0.0.1:9696/ user="NT AUTHORITY\SYSTEM"`
65+
`netsh http add urlacl url=http://127.0.0.2:9696/ user="NT AUTHORITY\SYSTEM"`
6666

6767
### Enable http listener IP address
6868

0 commit comments

Comments
 (0)