Obscure Problem with LMS 4.1

Finally got around to put Cisco Prime LMS 4.1 (They seem to be retiring the CiscoWorks brand.) on a Windows 2008 server -- I want to go the appliance route but more work is needed to get a VM in the enterprise environment for that.

First impression: LMS 4.1 looks very different from 3.2.1 on the web-based GUI. Cisco did put effort into modernizing the web-based interface and rearranging components to suite a network manager's work flow rather than around the various pieces that Cisco acquired to make up the LMS bundle. However, one may learn quickly the difference is much less profound under the hood.

Right off the bat, I hit a small snag.

After installation, I enabled HTTPS in Admin by going into Admin » Getting Started » Other System Settings » System Settings » Browser-Server Security Mode, selected Enable HTTPS and applied that setting.

After that, a user browser visiting the LMS server using HTTPS://server-name is redirected to http://server-name:1741/... after login, which produced a 403 (Forbidden) error.

TAC was not much help in this case. After poking my way around the server and the GUI, I think I have fixed the problem:

Go to Admin » Trust Management » Local Server » Browser-Server Security Mode Setup, select Change Setting To: Enable and apply.

It seems to me that both Browser-Server Security Mode from Getting Started and Browser-Server Security Mode Setup in Trust Management should mean exactly the same thing. But apparently they do not do the same thing.