EducationSoftwareStrategy.com
StrategyCommunity

Knowledge Base

Product

Community

Knowledge Base

TopicsBrowse ArticlesDeveloper Zone

Product

Download SoftwareProduct DocumentationSecurity Hub

Education

Tutorial VideosSolution GalleryEducation courses

Community

GuidelinesGrandmastersEvents
x_social-icon_white.svglinkedin_social-icon_white.svg
Strategy logoCommunity

© Strategy Inc. All Rights Reserved.

LegalTerms of UsePrivacy Policy
  1. Home
  3. Topics

Workstation Feature: Certificate Management

Yifan Liu

Product Owner • Strategy

Best Practices
Workstation: Certification Management
With many certificates in many locations, it is common to lose track of when any given certificate is about to expire so that it can be renewed.  Often, the first indication of a certificate's expiration date is when that date has passed and some function ceases to function.  The Certificate Management component should track certificate expirations and present visual cues to which certificates, across the whole of the MSTR deployment, are about to expire or have already expired.
Value
 
Certificate management allows users to view environment nodes, services, and the certificates of each service as they are displayed under the Certificates tab in Workstation. Furthermore, users can view the detailed certificate information of each service such as issuer, certificate type, expiration date, signature, IP address, Port, etc. This features provides an easy overview of all services and their certificate status across the environment. Users can also download the certificates of each service and save a local copy to their machine.
Architecture
The most important pre-requisite for the Certificates feature is to make sure that the Certificate Management component has been deployed correctly. Workstation certificates are fetched from the Certificate Store which stores the certificate information from the server. There is one important thing to note which is that the certificates shown are certificates on the load balancer server and not the actual I-Server itself. This means that for clustered environments, the certificate store will only know about services on its node, and will show "Status Unknown" for services that are not on its node.

ka02R000000keAGQAY_0EM44000000RSTE.png

In addition, not all services will have SSL certificates intrinsically. This means that the services shown under the Topology tab may be different than the services shown under the Certificates tab. While both Topology and Certificates use Consul to retrieve service information, the Certificates tab's purpose is to show information about certificates for services, so the services for which this information is not applicable are filtered out of the Certificates view. To view a comprehensive list of services registered with Consul and their statuses, go to the Topology tab. 
Requirements
 

The number of targets that are considered healthy.
 • Strategy delivers alert notifications through the Apple Push Notification Service (APNS). Therefore, you must have an Apple iOS developer license to send mobile push notifications. • Your Intelligence Server machine must have a direct internet connection to the Apple Push Notification Service (APNS). • You must have Strategy Distribution Services to use push notifications with Strategy. For information about purchasing a Distribution Services license, contact your Strategy account executive. • Push notifications must be enabled on an iPhone or iPad for the device to receive Strategy push notifications. In addition, the first time Strategy Mobile for iPhone or iPad is opened on a device, the user is prompted to allow the application to receive push notifications. • To enable push notifications, Mobile Server must be configured to use Secure Socket Layer (SSL) encryption. For detailed instructions on configuring Mobile Server to use SSL, see the Enabling Secure Communication chapter in the System Administration Guide. 1 Install the APNS certificate on the Intelligence Server machine that provides the push notifications. For instructions, see the documentation provided with your iOS developer license. 2 In Developer, create a Distribution Services device for iPhone or iPad. For detailed instructions, see the Scheduling Jobs and Administrative Tasks chapter in the System Administration Guide, or see the Developer Help (formerly the Strategy Desktop Help). 3 Create a configuration for the application (see Configuring MicroStrategy Mobile for iPhone or iPad). In the iPhone Settings or iPad Settings tab of the configuration, make sure that you select the Enable Push Notification check box. 4 The first time the user opens Strategy Mobile for iPhone or iPad on a device, the user is prompted to allow push notifications for Strategy Mobile. The user must select Allow push notifications.BuildPrivilegesPermissionsEnvironmentConfiguration11.0 or laterPrivilege under "7. Server - Intelligence > Monitor Environment" is required for a user to view Certificates information. Privilege under "7. Server - Intelligence > Monitor Environment" is required for a user to view Certificates information. The certificate store component must be installed in order for this feature to work.

The number of targets that are considered healthy.
 • Strategy delivers alert notifications through the Apple Push Notification Service (APNS). Therefore, you must have an Apple iOS developer license to send mobile push notifications. • Your Intelligence Server machine must have a direct internet connection to the Apple Push Notification Service (APNS). • You must have Strategy Distribution Services to use push notifications with Strategy. For information about purchasing a Distribution Services license, contact your Strategy account executive. • Push notifications must be enabled on an iPhone or iPad for the device to receive Strategy push notifications. In addition, the first time Strategy Mobile for iPhone or iPad is opened on a device, the user is prompted to allow the application to receive push notifications. • To enable push notifications, Mobile Server must be configured to use Secure Socket Layer (SSL) encryption. For detailed instructions on configuring Mobile Server to use SSL, see the Enabling Secure Communication chapter in the System Administration Guide. 1 Install the APNS certificate on the Intelligence Server machine that provides the push notifications. For instructions, see the documentation provided with your iOS developer license. 2 In Developer, create a Distribution Services device for iPhone or iPad. For detailed instructions, see the Scheduling Jobs and Administrative Tasks chapter in the System Administration Guide, or see the Developer Help (formerly the Strategy Desktop Help). 3 Create a configuration for the application (see Configuring MicroStrategy Mobile for iPhone or iPad). In the iPhone Settings or iPad Settings tab of the configuration, make sure that you select the Enable Push Notification check box. 4 The first time the user opens Strategy Mobile for iPhone or iPad on a device, the user is prompted to allow push notifications for Strategy Mobile. The user must select Allow push notifications.BuildPrivilegesPermissionsEnvironmentConfiguration11.0 or laterPrivilege under "7. Server - Intelligence > Monitor Environment" is required for a user to view Certificates information. Privilege under "7. Server - Intelligence > Monitor Environment" is required for a user to view Certificates information. The certificate store component must be installed in order for this feature to work.

The number of targets that are considered healthy.
 • Strategy delivers alert notifications through the Apple Push Notification Service (APNS). Therefore, you must have an Apple iOS developer license to send mobile push notifications. • Your Intelligence Server machine must have a direct internet connection to the Apple Push Notification Service (APNS). • You must have Strategy Distribution Services to use push notifications with Strategy. For information about purchasing a Distribution Services license, contact your Strategy account executive. • Push notifications must be enabled on an iPhone or iPad for the device to receive Strategy push notifications. In addition, the first time Strategy Mobile for iPhone or iPad is opened on a device, the user is prompted to allow the application to receive push notifications. • To enable push notifications, Mobile Server must be configured to use Secure Socket Layer (SSL) encryption. For detailed instructions on configuring Mobile Server to use SSL, see the Enabling Secure Communication chapter in the System Administration Guide. 1 Install the APNS certificate on the Intelligence Server machine that provides the push notifications. For instructions, see the documentation provided with your iOS developer license. 2 In Developer, create a Distribution Services device for iPhone or iPad. For detailed instructions, see the Scheduling Jobs and Administrative Tasks chapter in the System Administration Guide, or see the Developer Help (formerly the Strategy Desktop Help). 3 Create a configuration for the application (see Configuring MicroStrategy Mobile for iPhone or iPad). In the iPhone Settings or iPad Settings tab of the configuration, make sure that you select the Enable Push Notification check box. 4 The first time the user opens Strategy Mobile for iPhone or iPad on a device, the user is prompted to allow push notifications for Strategy Mobile. The user must select Allow push notifications.BuildPrivilegesPermissionsEnvironmentConfiguration11.0 or laterPrivilege under "7. Server - Intelligence > Monitor Environment" is required for a user to view Certificates information. Privilege under "7. Server - Intelligence > Monitor Environment" is required for a user to view Certificates information. The certificate store component must be installed in order for this feature to work.

The number of targets that are considered healthy.
 • Strategy delivers alert notifications through the Apple Push Notification Service (APNS). Therefore, you must have an Apple iOS developer license to send mobile push notifications. • Your Intelligence Server machine must have a direct internet connection to the Apple Push Notification Service (APNS). • You must have Strategy Distribution Services to use push notifications with Strategy. For information about purchasing a Distribution Services license, contact your Strategy account executive. • Push notifications must be enabled on an iPhone or iPad for the device to receive Strategy push notifications. In addition, the first time Strategy Mobile for iPhone or iPad is opened on a device, the user is prompted to allow the application to receive push notifications. • To enable push notifications, Mobile Server must be configured to use Secure Socket Layer (SSL) encryption. For detailed instructions on configuring Mobile Server to use SSL, see the Enabling Secure Communication chapter in the System Administration Guide. 1 Install the APNS certificate on the Intelligence Server machine that provides the push notifications. For instructions, see the documentation provided with your iOS developer license. 2 In Developer, create a Distribution Services device for iPhone or iPad. For detailed instructions, see the Scheduling Jobs and Administrative Tasks chapter in the System Administration Guide, or see the Developer Help (formerly the Strategy Desktop Help). 3 Create a configuration for the application (see Configuring MicroStrategy Mobile for iPhone or iPad). In the iPhone Settings or iPad Settings tab of the configuration, make sure that you select the Enable Push Notification check box. 4 The first time the user opens Strategy Mobile for iPhone or iPad on a device, the user is prompted to allow push notifications for Strategy Mobile. The user must select Allow push notifications.BuildPrivilegesPermissionsEnvironmentConfiguration11.0 or laterPrivilege under "7. Server - Intelligence > Monitor Environment" is required for a user to view Certificates information. Privilege under "7. Server - Intelligence > Monitor Environment" is required for a user to view Certificates information. The certificate store component must be installed in order for this feature to work.

The certificate store component needs to be configured.

 
Action Steps
To view certificates by Node

  1. Connect to the environment in Workstation
  2. Navigate to the Certificates tab on the left side
  3. Double click on the desired environment
  4. Click on "Node" column to sort the services by node
  5. User can view the Port, Expiration date from the screen or choose to click on the magnifying glass to view detailed information of each service's certificate
ka02R000000keAGQAY_0EM44000000RU7l.png

To download a local copy of the certificate of a specific service

  1. Connect to the environment in Workstation
  2. Navigate to the Certificates tab
  3. Double click on the desired environment
  4. Find the Library service from the list of services and click on the magnifying glass icon on the right side
  5. User can view the detailed certificate information of the Library service and download the certificate by clicking on "Download Certificate"
ka02R000000keAGQAY_0EM44000000RU7q.png

Boundary Conditions
 
Certificate store service is stopped or not working
If the Certificate Store service is either stopped or not working, user will be greeted with the following error message when trying to view the certificates of the environment.

ka02R000000keAGQAY_0EM44000000RSa0.png

User does not have required privilege to view certificates
If the user does not have privilege to view certificates "7. Server - Intelligence > Monitor environment", the below screen will be displayed when the user tries to navigate to the Certificates tab. The environment icon will be grayed out and unable to be clicked on.

ka02R000000keAGQAY_0EM44000000RSaF.png

User can view certificates, but does not have the privilege to download them
If the user does not have privilege to view certificates "7. Server - Intelligence > Administer environment", the below screen will be displayed when the user tries to preview to the Certificates tab. There will be no Download button displayed.

ka02R000000keAGQAY_0EM44000000RU7v.png
Comment

0 comments

Details

Knowledge Article

Published:

December 10, 2018

Last Updated:

March 5, 2019