I created the following web applications:

  1. https://webapp

  2. http://mysite

UPSA My Site host is http://mysite

I created an employee directory which shows profile pictures as broken in Chrome (v83).

Chrome developer tools show the following error:

Mixed Content: The page at '' was loaded over HTTPS, but requested an insecure image ''. This content should also be served over HTTPS.

I created AAM of Internal url: https://mysite - zone: default - Public URL for Zone: http://mysite and added a binding to mysite in IIS as https://mysite (http://mysite still exists).

I also added mysite to allow insecure content in Chrome but images are still broken.

How would I fix this message?

1 Answer 1


I created a new Web Application for My Sites - https://mysite, updated bindings, added SSL cert, created My Site Host Site Collection, updated UPSA and ran a script to import profile pics from AD to https://mysite.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.