Follow the steps below to configure HTTPS on both Platform Application Center and Tableau using a self-signed certificate.
Note that you can configure HTTPS only for Platform Application Center, only for Tableau, or for both.
When you configure HTTPS for Platform Application Center, it affects access to the web server (URL will be https), access to Web Services, and the Report Builder (Report Builder will need a certificate to communicate with Platform Application Center).
When you configure HTTPS for Tableau, it affects report generation and Workbook access.
The following steps use Platform Application Center’s own self-generated certificate to enable HTTPS. If you want to use your own certificate, the same steps may not apply.
This command generates a file named server.crt. Copy this file to a temporary directory on the Analytics reporting server.
C:\analytics8.0_reports\jre\bin\keytool -import -file server.crt -keystore C:\analytics8.0_reports\jre\lib\security\cacerts
PACServerUrl=https://192.168.0.1:8443
The following step is reproduced from the Tableau Knowledge Base (http://www.tableausoftware.com/support/knowledge-base/creating-ssl-certificate-and-key-tableau-server)
Open the Command Prompt, and change directories to the path specified below, based on your operating system:
Execute the command openssl.exe genrsa -des3 -out yourcertname.key 4096 from the Command Prompt to create your key file.
Note: This command uses a 4096 bit modulus for the key. Other values, such as 1024 bits can be used, but provides less security. If a value is not provided, 512 bits is used.
Type a passphrase after being prompted.
Important: Do not forget this passphrase.
Execute the command openssl.exe rsa -in yourcertname.key -out yourcertname.key from the Command Prompt to embed your passphrase.
Note: Although embedding a passphrase may compromise the security of the certificate, Tableau Server requires that the passphrase is embedded.
Execute the command openssl.exe req -new -key yourcertname.key -out yourcertname.csr command from the Command Prompt to create the CSR file.
Note: If you see an error message about the config information being unable to load, retype the command above with -config ..\conf\openssl.cnf. Alternatively, you can set an environment variable to resolve the issue by typing the following command:
set OPENSSL_CONF=c:\Program Files\Tableau\Tableau Server\6.0\apache\conf\openssl.cnf
Enter the required information after being prompted.
Note: When prompted to enter the Common Name value, type in the server name. If the common name and server name are different, errors will occur when a browser or Tableau Desktop try to connect to the server.
Create a certificate by sending it to a commercial provider or by signing it yourself.
Once you have the key and certificate file, you can apply it to Tableau Server using the instructions in the "Configuring SSL" section of the Tableau Server Administrator Guide (http://www.tableausoftware.com/currentadmin.php).
openssl.exe x509 -req -days 365 -in yourcertname.csr -signkey yourcertname.key -out tableau.crt
The following information is reproduced from the Tableau Administrator Guide, Configuring SSL chapter (http://downloads.tableausoftware.com/quickstart/server-guides/server_admin6.0.pdf)
Select the option to Use SSL for Server Communication. Then specify a location for each of the following certificate files. These files should be located on the local machine.
SSL Certificate File - must be a valid PEM encoded x509 certificate with the extension .crt
SSL Certificate Key File - must be a valid RSA or DSA key that is not password protected with the file extension .key
SSL Certificate Chain File (Optional) - Some certificate providers issue two certificates for Apache. The second certificate is the chain file that contains information about the provider. If your provider has issued this second certificate you can enter it here.
The changes will take effect the next time the server is restarted. When the server is configured for SSL, it will accept requests to the non-SSL port (default is port 80) and automatically redirects to the SSL port 443.
SSL errors are logged in the install directory at the following location. Use this log to troubleshoot validation and encryption issues.
C:\ProgramData\Tableau\Tableau Server\data\tabsvc\logs\httpd\error.log
NOTE: Tableau Server only supports port 443 as the secure port. It cannot run on a machine where any other application is using port 443.
C:\analytics8.0_reports\jre\bin\keytool -import -file tableau.crt -alias tableau -keystore REPORT_JRE_HOME/lib/security/cacerts
# keytool -import -file tableau.crt -alias tableau -keystore /opt/pac/jre/linux-x86_64/bin/keytools
TABLEAU_SERVER=https://Tableau_host_name:443
TABLEAU_SERVER=https://tabv6.lsf.platform.com:443