TIBCO Spotfire Server 3.2.2 - TIBCO Product Documentation

Advanced Procedures
9.3 Setting up HTTPS on a Spotfire Server
By default, Spotfire uses the HTTP protocol for communication between clients and
the server. To achieve a higher level of security, it is possible to use the HTTPS
protocol instead, ensuring encryption between clients and the server.
To configure a Spotfire Server to use the HTTPS protocol, you must perform these
steps:
1 Obtain or create a server certificate used to encrypt the traffic.
2 Install the certificate on the server.
3 Configure Spotfire to communicate over HTTPS.
Obtain a Server Certificate
The method for obtaining or creating a server certificate is different for every provider.
Please turn to your provider for information about this. In the section “Creating a Self-
Signed Server Certificate” on page 87, an example of how to create a self-signed
certificate using Microsoft Certificate Services is outlined.
Install the Certificate on the Server
To install the certificate on the Spotfire Server, place it anywhere on the disk,
preferably in a subfolder to the Spotfire Server installation directory, such as
/certs/.
Configure the Server to Communicate over HTTPS
To make the server communicate using the HTTPS protocol, you must now edit the
main configuration file of the server. This is found in the directory
/tomcat/conf/ and is called server.xml. You need to find the
section that defines the service “Spotfire”, and within that the section that defines the
Connector. This section begins with . Replace this section with the
following:
Be sure to replace [path to server’s private certificate] with the actual path to
the certificate, and [password] with the password to the keystore. If you have obtained
86 (144) TIBCO Spotfire® Server 3.2.2