Initializing help system before first use

Enabling HTTPS with Xpress Insight 5 Server

After enabling HTTPS with Xpress Insight 5 Server, you can customize the HTTPS port.
There are some prerequisites for this task.
  • Either:
    • An X.509 SSL certificate (and intermediate chain) in PEM format for the fully qualified domain name of server where Xpress Insight Server is installed (for example, host.company.com , or wildcard *.company.com) .
    • OpenSSL installed (or other tool able to convert PEM to PKCS12 files)
    • Private key for the SSL certificate, also in PEM format
  • A Java KeyStore containing an X.509 SSL certificate and its key. For more, see Create the SSL Certificate KeyStore.
Tip For testing purposes, a self-signed KeyStore can be created. For more, see Create a Self-Signed Keystore.

These instructions are OS agnostic—The same instructions work for both Windows and Linux.

To enable https on the Xpress Insight 5 Server:

  1. Configure the Xpress Insight 5 Server to use SSL. For more, see Insight Server SSL Configuration.
  2. Configure the Xpress Insight 5 Workers to use SSL. For more, see Execution Worker SSL Configuration.
  3. Ensure the server and workers trust their certificates. For more, see Trusting Self-Signed Certificates.
  4. For additional security, encrypt the configuration files. For more, see the following sections:
Covered Topics
  • Create the SSL Certificate KeyStore
    This topic explains how to create a KeyStore containing your existing SSL certificate and private key. The certificate within the KeyStore is used to encrypt the SSL connection.
  • Create a Self-Signed KeyStore
    This topic explains how to generate a KeyStore containing a new self-signed SSL certificate and private key. Self-signed certificates can be useful for evaluation environments, however they are not as secure as certificates signed by a public authority. The Insight 5 Server and each worker should have its own certificate.
  • Insight Server SSL Configuration
    You can enable HTTPS for the Xpress Insight 5 Server.
  • Execution Worker SSL Configuration
    You can enable HTTPS for the Xpress Insight 5 Worker.
  • Trusting Self-Signed Certificates
    You can use self-signed certificates to encrypt https communication; however these certificates are not as secure as certificates issued by a public authority and are, by default, rejected by browsers and client software such as Java.
Parent Topic Securing Xpress Insight 5