Setting Up SSL for Sisense on Linux
In Sisense, SSL secures the link between Sisense and your users' browsers (where dashboards are created and viewed). With SSL in place, you can access Sisense via an HTTPS secure connection, which is password protected. This is recommended when you want users to be able to access dashboards from outside the organization.
To set up SSL:
- Open the relevant configuration file for your deployment as described in Installing Sisense on Linux.
- Enter values for the following parameters:
update : Set to true.
is_ssl: Set the value to true.
ssl_key_path: Enter the path of key certificate file.
ssl_cer_path: Enter the path of your cer certificate file.
application_dns_name: Enter the common name (CN), or Fully Qualified Domain Name (FQDN), of your SSL host, for example, "test.sisense.com".
- Configure the local hostname file in your source machine where you connect from to identify the new application endpoint:
vim /etc/hosts and add IP-ADDRESS HOSTNAME
- Run the configuration script, for example:
This command may be different depending on your deployment. Following the instructions in Installing Sisense on Linux for more information.
- In your browser, access the server with the domain name configured in the hosts file.
If you are using custom certificates, you might experience problems connecting to data sources. This is caused by the custom certificate being rejected. To fix this, you need to provide the custom SSL certificates.
To prevent custom certificates from being automatically rejected:
- Copy your certificate. It should begin with -----BEGIN CERTIFICATE----- and end with -----END CERTIFICATE-----.
- On your Sisense server, navigate to /opt/sisense/storage/custom-certificates/.Note:
You can also access this directory from the Admin tab > search for and select System Management which is located under Server & Hardware > click File Management.
- Edit the ca-certificates.ca file, replacing the contents of the ca-certificates.ca file with the contents you copied in step 1, above.
- Save the ca-certificates.ca file.