How to configure HTTPS (SSL or Secure Sockets Layer) for Spotfire Statistica Server (a.k.a WebStatistica) and Spotfire Data Entry

How to configure HTTPS (SSL or Secure Sockets Layer) for Spotfire Statistica Server (a.k.a WebStatistica) and Spotfire Data Entry

book

Article ID: KB0137265

calendar_today

Updated On:

Products Versions
Spotfire Statistica 14.0 and higher

Description

Both WebStatistica and Web Data Entry are installed with only HTTP.  HTTPS must be configured after installation.  

Environment

Windows OS

Resolution

Get an appropriate certificate

 

Get an appropriate certificate from a certificate authority (CA).  For more information about CAs see https://www.digicert.com/blog/what-is-a-certificate-authority

Note:   Self-signed certificates can be used for testing only.  

 

 

Configure SSL in IIS

 

1,  Login to the WebStatistica (or Data Entry) server

2.  Open Internet Information Services (IIS) Manager  (Control Panel>>Administrative Tools>>IIS Manager)

3.  Import the certificate file obtained from the CA authority

     a. Select the server name under Connections.  Then double-click "Server Certificates":

image.png

     b.  Click "Import....":

image.png

     c.  Provide the location of the certificate file and password (provided by the CA):

image.png

4.  Select the "Default Web Site" under the Sites folder:

image.png

5.  Click on Bindings... on the far right side:

image.png

6.  Click Add...

image.png

7.  Select https in the Type drop down menu:

image.png

8.  Select the SSL certificate which was imported earlier and click OK:

image.png

9.  Select the WebStatistica (and/or for DataEntry) site and double-click "SSL Settings".  Check the "Require SSL" box, then click Apply:

image.png

Note:  Client certificates are optional.  The typical setting is "Ignore."  

 

The site is now accessible over HTTPS, https://servername/webstatistica or https://servername/dataentry

 

Note:  Using a self-signed certificate will give the "Your connection is not private" message, which is expected:

image.png

To bypass this message, click "Advanced">>"Proceed to <servername>":

 

Issue/Introduction

Configuring websites to use HTTPS is standard practice for website security.  This article provides the steps to configure HTTPS for both WebStatistica and web Data Entry.  

Additional Information