Enable Gallery SSL

Version:
2019.3
Last modified: October 11, 2019

Alteryx Server supports SSL (Secure Socket Layer) encryption via HTTPS to ensure that all communication between Alteryx Designer and Alteryx Server, as well as between a user’s web browser and your Alteryx Private Gallery, remains safe and secure. 

Before enabling SSL on your machine, obtain a valid SSL certificate for your Alteryx Private Gallery from a trusted Certificate Authority (CA). The service address that you specify for the certificate must match the address that you want to use for your Gallery website domain (the same domain in  Base Address URL in System Settings on the Gallery General screen). See Gallery.

After you have obtained the SSL certificate, you need to configure your web server to use that certificate when users visit your site. To do this, the certificate thumbprint must be associated with a specific port on the machine.

Obtain an SSL Cert's Thumbprint

Obtain the thumbprint of the certificate:

  1. Locate and open the certificate (.cer) file.
  2. Select the Details tab.
  3. Scroll through the list and highlight Thumbprint.
  4. The value displayed in the box at the bottom is the thumbprint of the certificate. Copy the value, paste it into a text editor, and remove all spaces. This is the value that is used when configuring the port.

Configure a Port to Use an SSL Cert

To associate the certificate’s thumbprint to a specific port:

  1. Select the Windows Start button to open the netsh console, type ‘netsh’ in Search, and press Enter.
  2. Edit the following command.
    • Replace the ‘certhash’ value with the certificate thumbprint value without the spaces.
    • Modify the ipport value if you want to use a port other than the default port 443.
    • Leave the appid as it is since it is the application ID of the Alteryx Gallery.
    http add sslcert ipport=0.0.0.0:443 certhash=0000000000003ed9cd0c315bbb6dc1c08da5e6 appid={eea9431a-a3d4-4c9b-9f9a-b83916c11c67}
  3. Paste the modified command into the netsh console and press Enter to associate the certificate with the given port.
  4. Verify the association and successful install of the certificate by running the following command in the netsh console. All SSL certificate associations and their respective ports are listed.
    http show sslcert

Configure the Alteryx Server Gallery URL

After the certificate is associated with a specific port, the Alteryx Server configuration must be changed to expect web requests over HTTPS instead of HTTP. Additionally, if the certificate has been associated with a port other than the default 443, Alteryx Server must be configured to utilize that port.

  1. Double-click the System Settings icon on your desktop.
  2. Click Next on each screen in System Settings to navigate through the Environment, Controller, and Worker components.
  3. On the Gallery General screen select the Enable SSL checkbox. Enabling this option changes the URL in the Base Address field to https.
  4. If you enable SSL and your certificate is set to a port other than the default 443, specify the port in the Base Address URL as well. For example: https://localhost:445/gallery/
  5. Click Next to continue navigating through the settings for the Gallery and Engine components and click Done to close the System Settings window and restart Alteryx Services.

After the SSL certificate is installed on the local server machine and SSL has been enabled in the Alteryx Server System Settings, users who go to the Gallery will see https: and a padlock symbol displayed before the URL address in their browser. This means that a secure link is established for that session, with a unique session key, and communications are secure.

Was This Helpful?

Need something else? Visit the Alteryx Community or contact support.