-config
argument with every use of openssl.exe, you can use the OPENSSL_CONF
environment variable to ensure that the correct configuration file is used and all configuration changes made in subsequent procedures in this article produce expected results (for example, you must set the environment variable to add a SAN to your certificate).set OPENSSL_CONF=c:Program FilesTableauTableau Serverpackagesapache.<version_code>confopenssl.cnf
set OPENSSL_CONF=c:Program Files (x86)TableauTableau Serverpackagesapache.<version_code>confopenssl.cnf
command instead. cd C:Program FilesTableauTableau Serverpackagesapache.<version_code>bin
openssl.exe genrsa -out <yourcertname>.key 4096
openssl.exe req -new -key yourcertname.key -out yourcertname.csr
OPENSSL_CONF
, you might see either of the following messages:-config .confopenssl.cnf
./usr/local/ssl
directory cannot be found. This directory does not exist on Windows, and you can simply ignore this message. The file is created successfully.tableau.example.com
in the address bar of your browser, then tableau.example.com
is the common name. If the common name does not resolve to the server name, errors will occur when a browser or Tableau Desktop tries to connect to Tableau Server.C:Program FilesTableauTableau Server<version_code>apacheconf
req_extensions = v3_req
# Extensions to add to a certificate request
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names
cRLSign
and keyCertSign
to the keyUsage line so it looks like the following: keyUsage = nonRepudiation, digitalSignature, keyEncipherment, cRLSign, keyCertSign
subjectAltName = @alt_names
Serial key generator pes 2018.DNS.1 = [domain1]
DNS.2 = [domain2]
DNS.3 = [etc]