MicroStrategy ONE

Configuring Secure Communication for MicroStrategy Web, Mobile Server, and Developer

Once the certificate stores have been set up on Intelligence Server, Web, and Mobile servers, you can now enable SSL communication in your MicroStrategy applications.

To Configure SSL for Web and Mobile Server

  1. From the Start menu choose All Programs > MicroStrategy Tools and select Web Administrator or Mobile Administrator.
  2. On the left, click Security.
  3. Under Traffic to the Intelligence Server, select the SSL option.
  4. Click Save.

To Configure SSL for Developer

  • You must use the Configuration Wizard to set up SSL for Intelligence Server, as described in Secure Communication in MicroStrategy.
  • For additional security, you can enable Developer to verify Intelligence Server's certificate with the Certificate Authority (CA) before transmitting any data. If you want to enable this option, you must obtain the following:
    • Your CA's SSL certificate. If you are using a commercial CA, refer to their documentation for instructions to download their certificate.
    • If you are using an enterprise CA that has Microsoft Certificate Services installed, visit http://hostname/CertSrv, where hostname is the computer on which Certificate Services is installed, and click Download a CA certificate, certificate chain, or CRL. Under Encoding method, select Base64.
    • The CSR generated when configuring SSL for Intelligence Server, as described in Generating an SSL Certificate Signing Request.
    • A .pem certificate containing both the SSL certificate and the CSR for Intelligence Server.
  1. In Developer, right-click the server-based project source that you use to connect to Intelligence Server, and select Modify Project Source.
  2. On the Connection tab, select the Use SSL check box.
  3. If you want Developer to verify Intelligence Server's certificate with the CA every time a connection is made, select the Verify Server Certificate check box.

    You must perform the following tasks to verify the server's certificate:

    • Download the CA's certificate to the computer running Developer.
    • In the Client SSL Certificate Authority Certificate field, enter the path to the .pem certificate referenced in the prerequisites above. For example, C:\Certificates\desktop.pem.
  4. Click OK.