TIBCO Spotfire Server 3.2.2 - TIBCO Product Documentation

Advanced Procedures
1 Open Tools > Internet Options in Internet Explorer.
2 Select the Security tab.
3 Select Local Intranet.
4 Click Sites > Advanced.
5 Add https:// to the list of hosts in this zone.
6 Click OK.
7 Select Custom level for the Intranet zone security settings.
8 Make sure that Don't prompt for client certificate selection when no certificates or
only one certificate exists is Enabled.
9 Click OK and confirm that the security settings should be changed.
Comment: This works if there is only one matching certificate. Thus if there is more
than one certificate which can be used by the server, there will still be
selection dialogs.
9.8 Setting up HTTPS in a Load Balanced
Environment
In a clustered environment, the clients see the load balancer as the server. Therefore, in
order to secure the communication in the Spotfire system, using HTTPS, the load
balancer needs to be configured to do this. This is achieved by obtaining (or creating)
a server certificate for the load balancer and instalingl it on the load balancer. You may
need to convert it first.
Note: You cannot use a server certificate created for a Spotfire server. A server
certificate must always be created for the computer it is intended for.
The following instructions assume that you are acquainted with the Apache httpd and
its configuration files. It should be seen as an overview of how HTTPS is setup for use
in load balancing a Spotfire system, not as a tutorial on Apache httpd. For more
information, please refer to the Apache httpd manual.
1 Install Apache httpd with ssl support and the mod_ssl.so and mod_jk modules.
2 Create a self-signed server certificate.
3 If needed, convert the certificate to a format readable by the load balancer.
4 Store the converted certificate in the Apache conf directory.
5 Configure Apache to use the certificate files.
6 Make your clients trust the CA certificate.
TIBCO Spotfire® Server 3.2.2 97 (144)