To configure SSL for CCS R&A module , we can face issues like :
1) SSL is not configured for SQL Server , hence it will prevent CCS to establish secure connection with the production and reporting databases .
SSL is used by the SQL server database and the client application to communicate in a secure manner . It enables the encryption of the data between the client and the server . In this case , the client is the CCS R and A module .
Before enabling SSL for the CCS module , we need to make sure that the SSL is enabled from the SQL server end . If the SQL server is not enabled for the SSL configuration, then enabling SSL from the CCS end would fail . Below are the steps on how to enable SSL for CCS R&A and also at SQL server end if not configured .
1.First make sure SSL is enabled for SQL Server (If possible, please consult the SQL DBA before making any changes, if it is for production environment) .
a)To enable SSL for sql server , we must install a certificate on the server . (this certificate is used by the SQL server to authenticate the encryption for any client application).
Follow these steps to install the certificate by using the Microsoft Management Console (MMC) snap-in.
1.To open the Certificates snap-in, follow these steps:
i)To open the MMC console, click Start, and then click Run. In the Run dialog box type:
ii)On the Console menu, click Add/Remove Snap-in....
iii)Click Add, and then click Certificates. Click Add again.
iv)You are prompted to open the snap-in for the current user account, the service account, or for the computer account. Select the Computer Account.
v)Select Local computer, and then click Finish.
vi)Click Close in the Add Standalone Snap-in dialog box.
vii)Click OK in the Add/Remove Snap-in dialog box. Your installed certificates are located in the Certificates folder in the Personal container.
2.Use the MMC snap-in to install the certificate on the server:
.Click to select the Personal folder in the left-hand pane.
i)Right-click in the right-hand pane, point to All Tasks, and then click Request New Certificate.
(Note At this point it might throw error like :
The wizard cannot be started because of one or more of the following conditions:
- There are no trusted certification authorities (CAs) available. - You do not have the permissions to request certificates from the available CAs. - The available CAs issue certificates for which you do not have permissions. )
This error pop ups , if the proper Certification Authority (and Certificate service) are not installed on the server .
Make sure that Enterprise CA is selected while installing Certificate Services(Consult the windows administrator if the certificate service is not installed on the machine).
èOnce certificate Service is properly installed , continue with the below steps to install a certificate for the SQL server .
ii)The Certificate Request Wizard dialog box opens. Click Next. Select Certificate type is "Domain Controller ".
iii)In the Friendly Name text box you can type a friendly name for the certificate or leave the text box blank, and then complete the wizard. After the wizard finishes, you will see the certificate in the folder with the fully qualified computer domain name.
iv)Now to enable encryption at the server, open the SQL Server Configuration Manager on the server where the certificate is installed, and then right click on “Protocols for <your_sql_serverservice_name> “ and select propertiesà On the Flags tab , mark “Yes” for force Encryption. à Go to Certificate tab, select the certificate as created in the above steps, then click Apply and OK.
v)Restart the SQL Server services.
Enable SSL for CCS R&A :
1. Go to Settings -->Secure Configuration --> Production database .
Check the "Use SSL" box and click on update .
2. Go to Settings -->Secure Configuration --> Report Database Configuration .
Perform the same step as mentioned above
Windows platform and SQL Server 2005 /2008.
Imported Document ID: TECH157692
Subscribing will provide email updates when this Article is updated. Login is required.