Enable HTTPS in Spectrum - spectrum_platform - Latest

By default the Spectrum Technology Platform server uses HTTP for communication with Spectrum Enterprise Designer, browser applications such as Spectrum Management Console and Metadata Insights, as well as for handling web service requests and API calls.

1. Stop the Spectrum Technology Platform server.
   • To stop the server on Windows, right-click the Spectrum Technology Platform icon in the Windows system tray and select Stop Spectrum. Alternatively, you can use the Windows Services control panel and stop the Precisely Spectrum Technology Platform service.
   • To stop the server on Linux, source the SpectrumDirectory/server/bin/setup script then execute the SpectrumDirectory/server/bin/server.stop script.
2. Load the certificate into a JSSE keystore. For more information, see Loading Keys and Certificates in the Jetty 9 documentation.
3. Using a text editor, open the file spectrum-container.properties located in SpectrumDirectory/server/conf.
   1. Uncomment and configure Spectrum HTTP settings:

      ##############################################
      #Spectrum HTTP settings
      ##############################################
      spectrum.http.default.protocol=https
      spectrum.https.enabled=true
      spectrum.https.port=8443

      The spectrum.keystore and spectrum.encryption settings in this section should be configured to match your installation.

   2. Configure settings in the Spectrum SSL settings section as required to match your installation:

      spectrum.encryption.enabled=true

   3. Uncomment and configure hostname and port in the Spectrum runtime settings:

      ##############################################
      #Spectrum runtime settings
      ##############################################
      spectrum.runtime.hostname=fully qualified domain name
      spectrum.runtime.port=8443

4. Import the certificates you are using. For example:
   keytool -importkeystore -srckeystore "C:\Precisely\Spectrum\server\conf\certs\keystore.p12" -destkeystore "C:\Precisely\Spectrum\server\conf\certs\truststore.p12" -deststoretype pkcs12

   If you are using a self-signed certificate, see Implementing self-signed certificates.

5. If you are configuring HTTPS communication for Spectrum Spatial and services, you must perform an additional configuration prior to restarting the Spectrum Technology Platform server.

   In Spectrum Spatial Manager, change the URLs in these service configurations to use HTTPS:

   • Mapping (only necessary when accessing the Mapping Service via SOAP and when the ReturnImage parameter for a RenderMap request is False)
   • WFS
   • WMS
   • WMTS

   For instructions, see Spectrum Spatial Manager under the Managing Spatial section of the Spectrum Spatial Guide.

6. Start the Spectrum Technology Platform server.
   • To start the server on Windows, right-click the Spectrum Technology Platform icon in the Windows system tray and select Start Spectrum. Alternatively, you can use the Windows Services control panel to start the Precisely Spectrum Technology Platform service.
   • To start the server on Linux, execute the SpectrumDirectory/server/bin/server.start script.