Configure SSRS with an SSL Certificate

Question

Configure SSRS with an SSL Certificate

thomasliddledba

Ten Centuries

Points: 1200
More actions
March 1, 2017 at 10:47 pm

#328068

Comments posted to this topic are about the item Configure SSRS with an SSL Certificate
Thomas LiddleSQL Server AdministratorVideo Blog - YouTubeWeb Blog - www.thomasliddledba.comTwitter - @thomasliddledbaFacebook - @thomasliddledba

Viewing 9 posts - 1 through 8 (of 8 total)

You must be logged in to reply to this topic. Login to reply

Koen Verbeeck SSC Guru Points: 259105 More actions · Answer 1

Hi Thomas,

thanks for the article, very informative.
One question though: is it necessary to create a new SSRS database?
Is there a possibility to reuse the existing one?

Need an answer? No, you need a question
My blog at https://sqlkover.com.
MCSE Business Intelligence - Microsoft Data Platform MVP

ijafri SSC Enthusiast Points: 120 More actions · Answer 2

hi,

thanks for writing up this article. I have had issues configuring SSRS using SSL. This document will help myself and others.

Can you please continue to add more details to the document. This will be very helpful.
Requesting the following additional information
- Add SSL to a preconfigured ssrs configuration running on port 80.
- Add some trouble shooting steps in case there are some problems.

It's a good startup article with more information added it will become a better documents.

thanks,
ij.

ijafri SSC Enthusiast Points: 120 More actions · Answer 3

hi,

thanks for writing up this article. I have had issues configuring SSRS using SSL. This document will help myself and others.

Can you please continue to add more details to the document. This will be very helpful.
Requesting the following additional information
- Add SSL to a preconfigured ssrs configuration running on port 80.
- Add some trouble shooting steps in case there are some problems.
- Please also show the configuration using the Advanced Option
It's a good startup article with more information added it will become a better documents.

thanks,
ij.

ScubaGuy SSC Journeyman Points: 84 More actions · Answer 4

One of the issues we have run into is in requiring SSRS to use SSL otherwise it's just a nice internal site and Mobile Reports are only visible from our network wifi or VPN as we are not in the mood to pass AD credentials in the clear.

Attempts to change "SecureConnectionLevel" and <UrlRoot> work great for reports with SSRS reports however data sets used by mobile are unable to be reached by the mobile reports. Almost seems like Mobile is not able to communicate to the datasets using SSL.

Setting SecureConnectionLevel = 0 seems to be the only method for these to work.

srawant SSCommitted Points: 1829 More actions · Answer 5

Hello Thomas,

A self signed Certificate might work and the report url can be hit only within the server itself. Outside of it, you will get error saying that the certificate is not from the trusted authority. How do you resolve it?

dejaifve.aswin Grasshopper Points: 14 More actions · Answer 6

srawant - Thursday, September 6, 2018 11:05 AM
Hello Thomas,
A self signed Certificate might work and the report url can be hit only within the server itself. Outside of it, you will get error saying that the certificate is not from the trusted authority. How do you resolve it?

I have the same question

ross.mcduff@l3harris.com Newbie Points: 1 More actions · Answer 7

If you run a GPO on an OU that installs the cert, it will work when you connect thru https:/xxxxxx Not an ideal fix but I tested it and it worked

Jeff_woodard Newbie Points: 1 More actions · Answer 8

To expand on Newbie's comment:

Modern Browsers such as Chrome and Edge to not natively trust a self signed certificate, so you will get a warning on these browsers. To resolve it so the browser will open without any additional warnings or prompts, install the certificate created in the article on the client machine in the Trusted Root Certification Authorities.

Some additional parameters you may want to add to the New-SelfSignedCertificate:

Expiration: -NotAfter (Get-Date).AddYears(2)

Name: -FriendlyName "My SSRS Server Cert"