https on administrator's interface

Hi all,

In order to satisfy my organisation’s security requirements, they have asked me to modify our WordPress instance so that the administrator’s login page is via https. I was successful in making the entire site https, but some pages that have “http” hard-coded broke (not my fault…I didn’t write those pages…) but, more importantly, the site became much slower.

It seems that our administrators would be satisfied if just the administrator’s interface was (i.e., where passwords are sent) are within https. The public pages can be sent via http.

I looked around and these instructions here clearly explain what I should do. However, it says under “Further Information”, that the steps below that are only for older versions of WordPress. Thus, all I need to do is:

define('FORCE_SSL_ADMIN', true);

I did that, but it isn’t working. That is, the public pages use http, but when I go to the administrator’s interface, it is still http.

I *guess* that there is something I need to do with my web server’s (Apache) configuration. I have one conf file for port 80 and one for port 443. However, neither this page nor others I have looked at which give similar advice explain what I should do.

Am I looking at the wrong place? Is there something wrong with my web server’s configuration files? Or is there something wrong elsewhere — perhaps within WordPress’ configuration?

Any help would be appreciated! I’m not sure which part of the system I should be focussing on…

Thank you!

Ray