===============================================================================

8 steps to get https (from http) on wc9 (wc8 covered also)

(from windchill shell) 

With JAVA_HOME set (no -Djdk option settin/arg needed):

1) ant -f config.xml configureSelfSignedCert -DServerName=hostname.xxx.com "-Djre.dir=C:\Program Files\Java\jre1.5.0_09" "-DcertAlias=R9_Apache"

With JAVA_HOME NOT set:

1) ant -f config.xml configureSelfSignedCert -DServerName=hostname.xxx.com "-Djre.dir=C:\Program Files\Java\jre1.5.0_09" "-Djdk.dir=C:\jdk1.5.0_09" "-DcertAlias=R9_Apache"

(your server name & jre/jdk paths will be different).

Maybe even use $(java.rmi.server.hostname) for -DServerName option, because if they dont match, the ssl wont work.
xconfmanager -d java.rmi.server.hostname (to obtain ServerName argument)

*******************************************************************************

(from windchill shell) 

2) xconfmanager -s wt.webserver.protocol=https -t codebase/wt.properties -p

*******************************************************************************

(from windchill shell) 

3) xconfmanager -s wt.webserver.port=443 -t codebase/wt.properties -p

*******************************************************************************

(from windchill shell) 

4) xconfmanager -s wt.server.codebase=$(wt.webserver.protocol)://$(java.rmi.server.hostname):$(wt.webserver.port)/$(wt.webapp.name) -t codebase/wt.properties -p
or
4) xconfmanager -s wt.server.codebase=$(wt.webserver.protocol)://$(java.rmi.server.hostname)/$(wt.webapp.name) -t codebase/wt.properties -p

xconfmanager -d xx.xx.properties to display original settings &/or see what it was changed.

*******************************************************************************

5) Duplicate wc9 home page (D:\ptc\Windchill_9 .0\Windchill\bin\HomePage.html) & rename. 
   Then edit 3 instances of http to https, along with changing port 80 to ssl 443.
   http://xxx.xx.com:80/Windchill now becomes https://xxx.xx.com:443/Windchill

*******************************************************************************

6) Duplicate & rename shorcut "Windchill Home Page" page in Windchill Programs folder & 
   have it point to newly created page from step 3 above. Maybe "Windchill Home Page - HTTPS"

*******************************************************************************

7) Duplicate shortcut to apache & rename. Then change httpd.exe to httpd.exe -DSSL for execution exe path 
   (apache.exe -DSSL or apache.exe -D SSL for windchill 8).

*******************************************************************************

8) When 1st time starting "Windchill Home Page - HTTPS" (or whatever you name it), you will be prompted 
   To accept certificate. Don’t say Yes or OK (from what I recall the buttons saying), select far right button 
   To place certificate in the "Trusted Root Certification Authorities store." Images included in zip.