TIBCO Spotfire Server 3.2.2 - TIBCO Product Documentation

Advanced Procedures
Comment: There is no need to select “Enable strong protection”.
22 Select Next.
23 Enter password for the file.
24 Specify where the key should be saved.
25 Select Next > Finish.
9.3.2 Getting Clients to Trust a CA Certificate
If you have created a self-signed server certificate, the clients will not trust this
certificate by default. For this to happen, you need to tell each client to trust the
Certificate Authority certificate (CA certificate). If you do not, the clients will not use
the certificate and communication with the server will not be possible. These
instructions assume that you are using Microsoft Certificate Services.
1 Connect to your Active Directory Certificate Service homepage. For example,
http:///certsrv/ with Internet Explorer.
2 Select Retrieve the CA certificate or certificate revocation list.
3 Click on the link Install this CA certification path > Yes > Yes.
Note: Verify that you can connect to the Spotfire Server using https and that the client
and server trusts each other without producing warnings.
9.3.3 Additional Windows Vista Settings:
Windows Vista will by default attempt to check if the certificate is revoked. This
cannot be done with a self-signed certificate. When this fails, communication between
the Spotfire client and the Spotfire Server will not work. You must therefore turn this
feature off. To do this, do the following:
1 Open Tools > Internet Options in Internet Explorer.
2 Select the Security tab.
3 Find the setting “Check for server certificate revocation” and clear it.
4 Click OK and confirm that you wish to do this.
9.4 Restricting Access to the Configuration
Console
To further increase security, you can restrict access to the configuration console. This
can be done by a feature built into Apache Tomcat, and is configured in server.xml.
TIBCO Spotfire® Server 3.2.2 89 (144)