The WebGME server itself does not provide a secure connection. Instead we recommend using a reverse-proxy in front of the WebGME server that encrypts the data. Nginx is a commonly used one and an example configuration for a webgme-app can be viewed here here.

To obtain a certificate you can either create a self signed one using OpenSSL. If you have domain name Let’s Encrypt offers free certificates.