1. Linux
    2. Windows
    3. IIS (Unavailable)
    1. Authentication Methods Overview
    2. Okta (SAML)
    3. OneLogin (SAML)
    4. Curator Users
    5. Azure AD (SAML)
    6. OneLogin (OIDC)
    7. Multifactor Authentication
    8. Signing SAML Login Requests
    9. Active Directory
    10. Windows LDAP (IIS) - DEPRECATED
    1. Windows SSL (IIS) - DEPRECATED
    2. Force SSL
    3. Linux SSL
    4. Windows SSL
    5. Basic HTTP Authentication
    1. High Availability
    1. Windows
    2. Linux
    1. Forward Proxy
    2. Reverse Proxy
    1. Getting Started
    2. Setting Up Your Portal
    3. Adding Your First Dashboard
    4. Creating Your First Page
    1. REST API Integration
    2. Tableau Cloud Setup
    3. Embed Authentication
    4. Trusted Tickets
    5. Alternative URL Routing
    6. Tableau Server Repository
    7. Tableau API Debugging
    8. API Connections Overview
    1. (Step 1) Azure App Setup
    2. (Step 2) Service Principal Setup
    3. (Step 3) Power BI Workspace Access
    4. (Step 4) Curator Connection
    5. Troubleshooting Power BI Access
    1. Integrating ThoughtSpot with Curator
    1. Replace Dashboard URLs
    2. Temporarily Disabling Connections
    1. Share Workbook
    2. Adding a Dashboard
    3. Tableau Worksheets and Stories
    4. Generating Titles
    5. Data Export
    6. Custom Views
    7. Email Subscriptions
    8. Download Workbook
    9. Pause and Resume Changes
    10. URL Action Overrides (Link Target)
    11. Dashboard Settings
    1. Adding a Pulse Metric
    1. Preloading Filters and Parameters
    2. Specify Filter Sheet
    3. Filters
    4. Parameters
    5. Hidden Sticky Filters and Parameters
    6. Apply Button
    7. Filter Categories
    8. Caching Filter and Parameter Options
    1. Updating Data Groups
    2. Sending Data to Webhooks
    3. Web Data Connector (WDC)
    4. Exporting Data
    5. Data Manager Basics
    6. Creating a Form
    7. Connecting to Data Manager
    8. User Commenting
    9. Field Calculations
    10. Mark Commenting
    11. Dashboard Feedback
    12. Importing Data
    1. Overview and Enabling
    2. Email Option
    3. Scheduled Reports
    4. Fallback Image
    5. Watermark Text
    6. Powerpoint
    1. Curator Styles
    2. Homepage
    3. Titles and Toolbars
    4. Group Overrides
    5. Page Meta Titles (SEO)
    1. Managing Menus
    2. Menu Items
    3. Restrict Access
    4. Tagged Workbooks
    5. Site Switcher
    1. Pages Overview
    2. Looker Embedding
    3. Tiles
    4. Explorer
    5. Forms
    6. Blogs
    7. User Customized Metrics
    8. Manual Embeds (iFrame)
    9. SSRS Embedding
    10. YouTube Embedding
    1. Files
    1. Hidden Content
    2. Search
    3. Keywords
    4. Favorites
    5. Featuring Content
    6. Thumbnail Preview Images
    1. Loading Screens
    1. Error Pages
    2. Tutorials
    3. Notices
    8. Email Formatting
    1. Users and Groups Overview
    2. User Sync and Membership Sync Overview
    3. Reset User's Password
    4. Frontend Users
    5. Automatic License Provisioning
    6. Just-in-time (JIT) Provisioning
    7. Username Mapping
    8. Custom Attributes
    1. Frontend User Permissions
    2. Password Change
    3. Password Reset
    4. Password Expiration and Complexity
    5. Disabling Link-preview Security
    6. User Throttling
    1. Third Party Cookies
    1. Overview
    2. Password Reset
    1. System Notifications
    2. Data Manager Notifications
    1. Troubleshooting Load Times
    2. Cache Warming
    1. Updating License Key
    1. Web Accessibility
    1. System Upgrade
    2. Disable Curator Upgrades
    3. Offline Upgrades (Airgapped)
    4. Dependency Updates
    5. Troubleshooting Upgrades
    1. Importing and Exporting
    1. Curator Backup
    2. Taking a Manual Full Backup
    3. Manual Restoration of Curator Backup
    1. Updating Curator Logging
    2. Disk Speed Metrics
    3. Server Hardening Procedures
    4. Filesystem Permissions
    5. Linux: Cron Troubleshooting
    1. Curator API Overview
    2. Curator Integration Overview
    1. Integration
    2. Curator API
    3. Tableau API
    4. Content
    5. User API
    6. Authentication
    1. Scripts
    2. Commands
    3. Subscription Routing
        1. Menu Tuning
        2. Cache Warming

      Setup: SSL

      Windows SSL

      Finding relevant files

      1. Find the curator.conf file (default location is C:\InterWorks\Curator\curator.conf).
      2. Find the relevant keys. These will either be in a bundle, or separated into key, certificate, and chain files.
      3. Put your keys into the correct directory (default location is C:\InterWorks\Curator\certs\).

      Removing Passphrases (Required, if applicable)

      If your certificate utilizes a passphrase, you'll need to remove it in order to use the certificate with Curator since passphrases are not supported by Apache on Microsoft Windows servers.

      1. Curator uses "Apache" type certificates. These may be referred to as "OpenSSL" or PEM certificates as well.

      2. Windows is unique in that it cannot use certificates with embedded passphrases, so these have to be removed if they are present. These passphrases would normally be required before a restart of your web server on other operating systems, but are not able to be used here.

      3. To remove the passphrases, you can use this command in the same directory as the certificates using Powershell.

        & 'C:\InterWorks\Curator\libs\Apache24\bin\openssl.exe' rsa -in [original.key] -out [new.key]

      Replacing References

      1. Locate the references in the file (listed below) and replace your new .crt, .pem, and .key files where they are referenced in the curator.conf file.

      2. Un-comment the lines (by deleting the # at the front of the line) starting at Listen 443 and ending at </IfModule>. See example below:

        #Uncomment the lines below for SSL
Listen 443
<IfModule mod_ssl.c>
    <VirtualHost _default_:443>
        SSLEngine on
        ServerName www.example.com
        DocumentRoot "C:\InterWorks\Curator\htdocs"
        RewriteEngine on

        SSLCertificateChainFile C:\InterWorks\Curator\certs\chain.crt
        SSLCertificateFile C:\InterWorks\Curator\certs\cert.pem
        SSLCertificateKeyFile C:\InterWorks\Curator\certs\cert.key

        SSLProtocol                 [protocol]
        SSLCipherSuite              [ciphersuite]
        SSLHonorCipherOrder         on
        SSLCompression              off

        <Directory "C:\InterWorks\Curator\htdocs">
            AllowOverride All
            Options Indexes FollowSymLinks
            Require all granted
        </Directory>
</VirtualHost>
</IfModule>

      3. After the configuration file has been edited and saved, restart Curator.

      SSL Protocols / Ciphers (Optional)

      1. You may wish to update your SSL protocols and cipher suites. To do this, you'll need a little more info about your environment. Run the command below to get your Apache and OpenSSL versions, assuming default install locations for both:

        & 'C:\InterWorks\Curator\libs\Apache24\bin\httpd.exe' -v; & 'C:\InterWorks\Curator\libs\Apache24\bin\openssl.exe' version

      2. The expected output will look something like this:

        Server version: Apache/2.4.59 (Win 64)
OpenSSL 3.3.1 4 Jun 2024 (Library: OpenSSL 3.3.1 4 Jun 2024)

      3. Take the information retrieved in the previous step and use it to fill out the form on this SSL Certificate Generator site.

        • Select Apache for "Server Software"
        • Select Intermediate for "Mozilla Configuration".
        • Enter your Apache version
        • Enter your OpenSSL version

      4. Replace the appropriate areas in the curator.conf file with the SSLProtocol and SSLCipherSuite that was generated on the SSL Certificate Generator site.

        For example:

        SSLProtocol             all -SSLv3 -TLSv1 -TLSv1.1
SSLCipherSuite          ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:
ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:
DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305

      5. Have a server open to the internet? Qualys has a free tool to test the certificates, protocols/ciphers, and their security: https://www.ssllabs.com/ssltest/analyze.html