SSL configuration

To configure a secure socket layer (SSL) for a stand-alone installation or a single-Manager cluster installation of Spotfire Statistics Services, follow Apache Tomcat documented processes.

In the case of the single Manager node cluster with no load balancer, you do not need to perform this configuration on Worker nodes. If you have a load balancer, you must consult your load balancer documentation concerning SSL configuration.

For detailed information and procedures on configuring SSL with Apache Tomcat, follow the procedures in the SSL Configuration HOW-TO on the Apache Tomcat Web site.

https://tomcat.apache.org/tomcat-9.0-doc/ssl-howto.html

Use this information to configure SSL withSpotfire Statistics Services. For a default installation:

  • Stand-alone server installation: Set SPSERVER_HOME/jre as JAVA_HOME and use the Apache Tomcat configuration file, server.xml, located in SPSERVER_HOME/tomcat/conf.
  • Cluster installation: Set SPSERVER_SHARE/jre as JAVA_HOME and use the Apache Tomcat configuration file, server.xml, located in SPSERVER_SHARE/tomcat/conf.

After you have configured SSL, modify the properties in the spserver.properties configuration file at SPSERVER_HOME/conf/ (for a standalone installation) or in SPSERVER_SHARE/conf (if you installed a cluster with only one Manager node and no load balancer). In most cases, you must update only the service.url property. For example, the following non-default service.url assignment indicates that Spotfire Statistics Services is using an SSL Connector on port 8443:

service.url=https://servername:8443/<service_name>/

Related tasks