In order for Webtrends to communicate over SSL the following change must be made:
1. Launch Webtrends
2. Navigate to Administration > System Management > Global Roles.
3. Click the 'UI Server' link.
4. Check the 'Enable SSL' checkbox.
5. Select OK.
6. Restart services when prompted.
To create a valid certificate for the installation, follow the steps below:
1. Open a command line window and navigate into the following folder:
2. Type the following command:
The "OpenSSL>" command line appears.
3. Type the following command:
genrsa -des3 -rand ssl.rnd -out server.key 1024
4. The openssl utility prompts for a pass-phrase. Save the pass-phrase in a secure location.
Note: If you want a DSA private key, replace genrsa with gendsa. To encrypt your key with DES rather than 3DES, replace -des3 with -des.
5. Typically, the Apache Web server prompts for a pass-phrase when the server is started. If you want to start Webtrends without manual intervention, complete the following steps:
a. To copy the server key, type the following at the command line:
copy server.key server.key.org
b. Run openssl.exe.
c. At the openssl> prompt, type the following:
rsa -in server.key.org -out server.key
d. Copy the private key to your Apache installation by typing:
copy server.key \Webtrends\common\apache\conf\ssl.key
6. Create a Certificate Signing Request:
a. Run openssl.exe.
b. At the openssl> prompt, type the following:
req -new -config openssl.cnf -key server.key -out server.csr
7. The openssl utility prompts you for a variety of information. Provide information based on your Webtrends installation. This creates the server.csr file. Send this file to a Certificate Authority for signing.
8. When you get a response (signed certificate) from the Certificate Authority, copy the response to your Apache installation using the following command:
copy <signed certificate> \Webtrends\common\apache\conf\ssl.crt\server.crt
a. To use a certificate for testing, the certificate request file (.csr) can also be self-signed. From the openssl> prompt, execute the following:
x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
9. Locate the http.conf.txt file in the WTInstallDir\common\apache\conf\ folder. Edit this file and change the following 2 entries:
to reflect the proper location and file names for the certificate and key.
10. Save the httpd.conf.txt
11. Restart the Webtrends - User Interface service.