KB441390: How to configure TLS/SSL between the MicroStrategy Web Services and MicroStrategy Intelligence Server

Pre-requisites:

1. SSL must already be configured on the Strategy Intelligence Server.
2. Strategy Developer must successfully connect to the Intelligence Server via the SSL port.
3. Strategy Web must be connecting to the Strategy Intelligence Server via the name configured in the certificate.
4. Access to a machine with the keytool utility.

ACTION:
Follow these steps to be able to connect Strategy Web Services to Strategy  Intelligence Server using TLS/SSL:

1. Create a truststore and insert the root CA certificate with the following keytool command and take note of the password:
   

   
   keytool -import -file rootCA.crt -alias rootCA -keystore myTrustStore

   
   
2. Place the trustore file (myTrustStore if you used the command in step number 1) in <Strategy Web Services Installation Folder>/WEB-INF/
3. This step is different based on if you are using ASP or JSP:
   
1. ASP: Create a file called MWSConfig.properties in your <Strategy Web Services Installation Folder> (StrategyWS by default) with the following content:
   

   
   TLS_INTELLIGENCE_SERVER=true 
   #Location of truststore (relative to application) 
   TLS_INTELLIGENCE_SERVER_TRUSTSTORE=WEB-INF/myTrustStore 
   #Trust store password 
   TLS_INTELLIGENCE_SERVER_TRUSTSTORE_PWD=YOUR_PASSWORD

   
   
2. JSP: Modify the file  called MWSConfig.properties in your <Strategy Web Services Installation Folder> and modify the following lines with the values as shown below:
   

   
   TLS_INTELLIGENCE_SERVER=true 
   #Location of truststore (relative to application) 
   TLS_INTELLIGENCE_SERVER_TRUSTSTORE=WEB-INF/myTrustStore 
   #Trust store password 
   TLS_INTELLIGENCE_SERVER_TRUSTSTORE_PWD=YOUR_PASSWORD

   
   Note: Make sure you replace YOUR_PASSWORD with the password you used in step number 1.
4. Restart your Web Application Server (IIS, Tomcat....)

KB441390