Configuring XI R2 and IIS for SSL (https)

server administration XI Server Discussion
1

My understanding is that there are 2 ways to configure XI R2 for SSL:

  1. By loading a cert in your web application server (IIS or Tomcat for instance) and activating directory security at the IIS BusinessObjects level. This will protect web pages accessed via https.

  2. By specifying a cert for all XI services visible in your CCM. This protects communication between XI services and has nothing to do with web server support for https. This feature is for paranoid customers or customers running clustered XI across a public WAN.

My understanding is that you can use one or both of the above techniques to secure an XI system.

My question: Do I need to do anything special to enable SSL/https capabilities on an existing XI R2 setup running on IIS 5 or IIS 6? By special I mean beyond installing my cert, activating it for my BusinessObjects IIS application, and setting my secure port to 443.

Thank you,

Bill

XI R2, MHF1, CHF16 on Win 2000/2003 with IIS, SQL Server 2000, Oracle 9

bgunn (BOB member since 2006-12-19)

2

Follow-up questions

  1. Do I need to run the sslconfig if I’m JUST setting up SSL at the server (vs. CCM/service) level?

  2. Do I need to re-install my XI R2 IIS WCA after I’ve added my SSL certificate?

Thanks,

Bill

bgunn (BOB member since 2006-12-19)

3

Hello.
As far as i know, Yiu just need to set the certificate at the server level.
You also have to run into java security stuff as the applet has to be secured to.

Regards

Correges and Smith :fr: (BOB member since 2007-02-26)

4

Moved from “General Discussion” to “Server Administration, Installation, Upgrades” ==> XI Servers.

Anita Craig :us: (BOB member since 2002-06-17)

5

Regarding web server SSL and XI R2:

Install the SSL certificate in IIS. Restart IIS. That’s it.

I thought it might be more complicated. Its not :slight_smile:

Thanks for your help Correges and Smith!

Regards,
Bill

bgunn (BOB member since 2006-12-19)

6

Hi !
I am pretty sure that the applet is not running in ssl …

Correges and Smith :fr: (BOB member since 2007-02-26)