# Recover HTTPS (SSL) Access

If the Public IP of a running Instance changes, the existing Domain mapping may break, which can cause issues with **Web Console access** or your **streaming service**. 

In this case, check the current connection status in the Web Console’s <mark style="color:yellow;">\[SSL Configuration]</mark> page, and restore the connection by following the steps below based on your SSL setup method (Option A/B).

## When Using "OvenMediaEngine Enterprise–Provided Subdomain with an Auto-Managed SSL Certificate" <a href="#option-a" id="option-a"></a>

If you are using the default Subdomain and Auto-Managed SSL Certificate provided by OvenMediaEngine Enterprise on AWS, the fix is very simple.

{% stepper %}
{% step %}

### Check IP and Domain Mapping Status <a href="#check-the-ip-and-domain-mapping-status" id="check-the-ip-and-domain-mapping-status"></a>

1. In the Web Console, click the <mark style="color:yellow;">\[Settings]</mark> icon in the upper-right corner to open the Settings page.
   &#x20;Then, select <mark style="color:yellow;">\[SSL Configuration]</mark> from the left menu to open the SSL configuration page.

<figure><img src="https://content.gitbook.com/content/xo7moYXTh3yBG01Dy49w/blobs/Hsqw0Q9xx78lywkVpCw5/image.png" alt=""><figcaption></figcaption></figure>

2. If the Instance IP and the configured Domain do not match, the system detects it and displays an <mark style="color:$primary;">**IP Address Mismatch**</mark> alert.

{% hint style="danger" %}
To prevent recurring issues, **assign an AWS Elastic IP** (EIP) and **pin the Instance's Public IP** before reconfiguring SSL.

* If the Instance is not assigned a fixed Public IP, its Public IP may change when you **stop** and **start** (or reboot) the Instance, which can break the existing Domain mapping and cause service downtime. To ensure stable Domain operation and continuous secure connections, assign an AWS Elastic IP first, and then proceed with SSL configuration.
  {% endhint %}
  {% endstep %}

{% step %}

### Reconnect IP and Domain <a href="#reconnect-the-ip-and-domain" id="reconnect-the-ip-and-domain"></a>

<figure><img src="https://content.gitbook.com/content/xo7moYXTh3yBG01Dy49w/blobs/81zji1apYE94v4buVhHA/image.png" alt=""><figcaption></figcaption></figure>

3. On the <mark style="color:yellow;">\[SSL Configuration]</mark> page, click <mark style="color:yellow;">**\[Fix IP Address Mismatch]**</mark> next to the error message. The system automatically detects the new Instance IP (Public IPv4 address) and updates the Domain mapping information.
4. Once the update is complete, Web Console access and the Streaming service should be restored.

{% hint style="success" %}
DNS changes may take time to propagate across the global network. Depending on the environment, it may take from a <mark style="color:yellow;">few minutes to several hours</mark>. If access does not work immediately after the change, please wait and try again.
{% endhint %}
{% endstep %}

{% step %}

### Confirm Reconnection <a href="#confirm-reconnection" id="confirm-reconnection"></a>

5. Follow the "[Verify SSL playback and check URLs](https://ovenmediaengine-enterprise.gitbook.io/guide/exclusive/ssl-configuration-on-aws#verify-ssl-playback-and-check-urls)" guide to run a basic streaming test and confirm everything is working normally.
   {% endstep %}
   {% endstepper %}

## When Using "Your Own Domain with Your Own Certificate" <a href="#option-b" id="option-b"></a>

If you are using a domain you own along with your own SSL certificate, you must reconfigure SSL settings in the Web Console and update the DNS records of the domain currently in use.

{% stepper %}
{% step %}

### Check IP Address <a href="#check-ip-address" id="check-ip-address"></a>

<figure><img src="https://content.gitbook.com/content/xo7moYXTh3yBG01Dy49w/blobs/Eiyd5nxKgsg6230OuEFc/image.png" alt=""><figcaption></figcaption></figure>

1. In the Web Console, click the <mark style="color:yellow;">\[Settings]</mark> icon in the upper-right corner to open the Settings page.
   &#x20;Then, select <mark style="color:yellow;">\[SSL Configuration]</mark> from the left menu to open the SSL configuration page.

{% hint style="info" %}
At this stage, the system cannot determine whether the configuration is valid, so it may not display warnings such as an IP Address Mismatch to the user.
{% endhint %}

2. On the <mark style="color:yellow;">\[SSL Configuration]</mark> page, verify the Instance IP (Public IPv4 address) shown in the interface.

{% hint style="danger" %}
To prevent recurring issues, **assign an AWS Elastic IP** (EIP) and **pin the Instance's Public IP** before reconfiguring SSL.

* If the Instance is not assigned a fixed Public IP, its Public IP may change when you **stop** and **start** (or reboot) the Instance, which can break the existing Domain mapping and cause service downtime. To ensure stable Domain operation and continuous secure connections, assign an AWS Elastic IP first, and then proceed with SSL configuration.
  {% endhint %}
  {% endstep %}

{% step %}

### Update the IP Address for the Domain <a href="#reconnect-the-ip-and-domain" id="reconnect-the-ip-and-domain"></a>

3. Update the DNS record of your domain so that it points to the Public IPv4 address confirmed in <mark style="color:yellow;">\[SSL Configuration]</mark>.
4. Return to the Web Console, click <mark style="color:yellow;">\[Change Configuration]</mark> on the <mark style="color:yellow;">\[SSL Configuration]</mark> page, switch to edit mode, and first apply the configuration as <mark style="color:$primary;">**Disabled**</mark>.
5. Then follow the "[Configure and Verify SSL](https://ovenmediaengine-enterprise.gitbook.io/guide/exclusive/ssl-configuration-on-aws#configure-and-verify-ssl)" guide and configure SSL again using the <mark style="color:$primary;">**Your Own Domain with Your Own Certificate**</mark> option.

{% hint style="success" %}
DNS changes may take time to propagate across the global network. Depending on the environment, it may take from a <mark style="color:yellow;">few minutes to several hours</mark>. If access does not work immediately after the change, please wait and try again.
{% endhint %}
{% endstep %}

{% step %}

### Verify Reconnection <a href="#verify-reconnection" id="verify-reconnection"></a>

6. Follow the "[Verify SSL playback and check URLs](https://ovenmediaengine-enterprise.gitbook.io/guide/exclusive/ssl-configuration-on-aws#verify-ssl-playback-and-check-urls)" guide to run a basic streaming test and confirm everything is working normally.
   {% endstep %}
   {% endstepper %}