How to configure SSRS 2016 so that it uses HTTPS

  • How does one configure SSRS to use the HTTPS protocol instead of just HTTP ?   Does one need to have a certificate installed on the server?  How does one get such a certificate, and does it cost $ ?  If it's not facing outside one's company, can one just create the certificate with some kind of free tool instead of having to purchase a cert from a certificate authority?   Any other things needed to install a cert?  Anything else I'm going to want to know and/or document ?

    Steve (aka sgmunson) 🙂 🙂 🙂
    Rent Servers for Income (picks and shovels strategy)

  • Hi,

    here's a rather good manual how to set up SSL while this one refers to TDE, same thing should work with SSRS the latter one requiring an internet Connection for certificate renewal.

    Asides that you can create your own Certificate Authority with Active Directory Services or just have the SQL Server use VM / Host created certificates. Let's encrypt and your own CA configured properly will give you a nice and warm green bar in your company browsers, any other non Paid Certificates will have to be added as exceptions (unless you publish CRLs etc.)

  • This worked wonderfully, and I was able to take that certificate to my laptop and install it, but now if I want to see where in the Certificate hierarchy I could see it using the certificate management console (msc), I can't find it.   I tried to add it to Trusted Root Auth-something or other, but I don't recall the exact path, and I can't seem to find any evidence of it other than that the warning about "not secure" in Chrome browser has gone away.   Any ideas?   I also installed the same cert using the "automatic" setting the first time, and again, no idea where it ended up, or if there's a way to see where it went?

    EDIT: this is a Windows 7 machine.

    Steve (aka sgmunson) 🙂 🙂 🙂
    Rent Servers for Income (picks and shovels strategy)

  • Uh, not entirely sure where these usually end up, I just use an mmc with the CMC plugin, I just load it twice right away, once for the user and once for the computer account. From there on these pesty certificates have no way to hide past up to the first 15 Minutes of clicking through everything … 😀 it really depends what the certificate is supposed to do. I would guess as it's used by a service it's under the computer account unless the service is running through an AD Account.

  • sgmunson - Tuesday, March 19, 2019 2:13 PM

    This worked wonderfully, and I was able to take that certificate to my laptop and install it, but now if I want to see where in the Certificate hierarchy I could see it using the certificate management console (msc), I can't find it.   I tried to add it to Trusted Root Auth-something or other, but I don't recall the exact path, and I can't seem to find any evidence of it other than that the warning about "not secure" in Chrome browser has gone away.   Any ideas?   I also installed the same cert using the "automatic" setting the first time, and again, no idea where it ended up, or if there's a way to see where it went?

    EDIT: this is a Windows 7 machine.

    Which way or how did you create the certificate?
    My first guess is that in the console, you'd find it under Personal -> Certificates.
    Also, if you right click on the Certificates((Local Computer) node at the top, you can do a find...try searching by the Windows 7 machine name and issues to or issued by

    Sue

  • Sue_H - Wednesday, March 20, 2019 11:35 AM

    sgmunson - Tuesday, March 19, 2019 2:13 PM

    This worked wonderfully, and I was able to take that certificate to my laptop and install it, but now if I want to see where in the Certificate hierarchy I could see it using the certificate management console (msc), I can't find it.   I tried to add it to Trusted Root Auth-something or other, but I don't recall the exact path, and I can't seem to find any evidence of it other than that the warning about "not secure" in Chrome browser has gone away.   Any ideas?   I also installed the same cert using the "automatic" setting the first time, and again, no idea where it ended up, or if there's a way to see where it went?

    EDIT: this is a Windows 7 machine.

    Which way or how did you create the certificate?
    My first guess is that in the console, you'd find it under Personal -> Certificates.
    Also, if you right click on the Certificates((Local Computer) node at the top, you can do a find...try searching by the Windows 7 machine name and issues to or issued by

    Sue

    I used the article referred to by DinoRS to create the cert, on the SSRS / SQL Server itself.
    I've also installed that cert on 2 Windows 7 machines and a Windows 10 machine.

    Steve (aka sgmunson) 🙂 🙂 🙂
    Rent Servers for Income (picks and shovels strategy)

  • I also am ready to start implementing the SSRS in a way that allows users to access it.
    I appear to need folder permissions, and I'm also going to need direction on how to set
    up the security for the shared data sources so that each user won't need to supply any
    credentials.  Not quite sure what the best way to do that is...  and still be able to know
    who is running what report.   Suggestions?

    Steve (aka sgmunson) 🙂 🙂 🙂
    Rent Servers for Income (picks and shovels strategy)

  • Sue_H - Wednesday, March 20, 2019 11:35 AM

    sgmunson - Tuesday, March 19, 2019 2:13 PM

    This worked wonderfully, and I was able to take that certificate to my laptop and install it, but now if I want to see where in the Certificate hierarchy I could see it using the certificate management console (msc), I can't find it.   I tried to add it to Trusted Root Auth-something or other, but I don't recall the exact path, and I can't seem to find any evidence of it other than that the warning about "not secure" in Chrome browser has gone away.   Any ideas?   I also installed the same cert using the "automatic" setting the first time, and again, no idea where it ended up, or if there's a way to see where it went?

    EDIT: this is a Windows 7 machine.

    Which way or how did you create the certificate?
    My first guess is that in the console, you'd find it under Personal -> Certificates.
    Also, if you right click on the Certificates((Local Computer) node at the top, you can do a find...try searching by the Windows 7 machine name and issues to or issued by

    Sue

    I did finally find it, just had to scroll down more slowly in the Trusted Root location.
    EDIT: which is right where I put it.

    Steve (aka sgmunson) 🙂 🙂 🙂
    Rent Servers for Income (picks and shovels strategy)

Viewing 8 posts - 1 through 7 (of 7 total)

You must be logged in to reply to this topic. Login to reply