Install, License, and Configure ThingWorx Navigate > Install ThingWorx Navigate (Recommended) > Configure ThingWorx Navigate
  
Configure ThingWorx Navigate
Welcome back. We’re almost there—configuration is the last step in setting up ThingWorx Navigate. Make sure you meet the prerequisites:
You used the installation tool to install ThingWorx Navigate and the supporting applications. The installation completed successfully, with no errors.
This configuration tool does not support configuring for manual installations.
Make sure you meet the Windchill server requirements and the server information is handy. Refer to the Windchill prerequisites section in this topic.
You decided on an authentication method—Single Sign-on, Windchill Authentication, or Fixed Authentication. Ensure that your system meets the prerequisites for the authentication method you plan to set up.
For Single Sign-on:
Ensure ThingWorx is configured using SSL.
Make sure to import the Windchill SSL certificate (Certificate Chain) and the PingFederate SSL certificate into the Java TrustStore (cacerts/jssecacerts) file of Apache Tomcat.
For Windchill Authentication:
Ensure your Windchill administrator has configured a whitelist property for URL redirects. If this property is not configured, you will not be able to access ThingWorx Navigate. See this technical support article for more information on this issue.
Make sure to import the Windchill SSL certificate (Certificate Chain) into the Java TrustSture (cacerts/jssecacerts) file of Apache Tomcat.
For Fixed Authentication, make sure to import the Windchill SSL certificate (Certificate Chain) into the Java TrustSture (cacerts/jssecacerts) file of Apache Tomcat.
Let’s get started:
If you manually started the configuration tool, click Next on the welcome page, verify the prerequisites in the Getting ready to configure page and click Next, and then provide the details of your ThingWorx Navigate installation.
Windchill prerequisites
These are the requirements for Windchill:
Windchill—Check the Platform Support Matrix for ThingWorx Navigate for the supported versions and minimum CPS.
For enhanced security, we recommend configuring your Windchill server with SSL before you begin a ThingWorx Navigate installation. Refer to the Windchill Installation and Configuration Guide for instructions on how to do this.
* 
If you plan to configure your ThingWorx Navigate using the Windchill authentication, you must configure your Windchill server with SSL before you begin the installation.
For Windchill versions prior to Windchill 11.1 M020 CPS 15, an enablement patch must be loaded onto the Windchill server to enable the PTC Windchill Extension for ThingWorx. Refer to the Apply a PTC Windchill Patch topic for details.
Provide the ThingWorx Navigate installation details
Remind us of the location of your ThingWorx Navigate installation, and provide the Application Key.
1. On the ThingWorx Connection page, under Provide the location of the ThingWorx installation, including the ThingWorx folder, browse to the location where you installed ThingWorx Navigate. Click Next.
Your Apache Tomcat is automatically restarted after this step. It may take some time to get up and running again.
2. Now, we need the ThingWorx Application Key. Follow these steps to get the ThingWorx Application Key:
a. Click the link, Click here to get the Application Key. ThingWorx Composer opens in a browser window.
b. On the Browse tab, under SECURITY, click Application Keys. The list of application keys opens on the right.
c. Click the name of your App Key to open it.
d. Copy the value under Key ID.
e. Back in the ThingWorx Navigate Configuration tool, paste the value in the box next to Application KeyId.
3. Click Next. Your Application Key is validated.
Select the authentication method
1. Now, select the authentication method for your system:
Single Sign-on (SSO)—We recommend using Single Sign-on authentication. Your users can use a single login to access multiple enterprise applications. PTC supports industry SSO standards and has incorporated PingFederate as an SSO solution.
Windchill Authentication—This configuration uses Windchill authentication for ThingWorx.
Fixed—You can use this configuration as a fast, alternative system setup for testing. Or, you can use it to demonstrate ThingWorx Navigate functionality. It is not secure, and fixed authentication should never be used in production.
2. Click Next.
Set up your authentication
Go to one of these topics to configure your authentication:
Set Up ThingWorx Navigate with Single Sign-on
Set Up ThingWorx Navigate: Windchill Authentication
Set Up ThingWorx Navigate: Fixed Authentication