When using the Setup Commander Service Edition, using http:// is unsafe because passwords are sent to the Setup Commander Service Portal in clear text.
We strongly advise installing a certificate and creating an HTTP binding for the ‘Default Web Site’ or the site you’ve configured the Setup Commander Service Portal for.
For more information on how to set up SSL on IIS, see the Microsoft documentation.