I'm trying to run Reporting Services through SSL. For the most part everything is working, but I still have some minor problems. The links for "Home", "My Subscriptions", etc. in the upper left corner of Report Manager all start with "http://" rather than
"https://". The icons for "New Data Source", "Upload File", and "Report Builder" in the toolbar also have the same problem. All the other links and icons point to URLs starting with "https://".
When I click on any of these problem links I get an error saying "https://" is required. If I manually change the address to "https://" the proper page appears.
In RSWebApplication.config I have ReportServerUrl = https://<machine>/ReportServer.
In RSReportServer.config I have SecureConnectionLevel = 3 and UrlRoot = https://<machine>/ReportServer.
Try to set the config file according to the following points:
RSReportServer.config
In RSReportServer.config, which you will find in \Program Files\Microsoft SQL Server\MSSQL\Reporting Services\ReportServer, you'll need to locate the <URLRoot>
element and update the NetBIOS name to the DNS name, and also the http:// to https://. Take care to use the same case for the letters as you used in the certificate:
So, in our example here we needed to edit the <URLRoot> to be:
You'll find RSWebApplication.config in C:\Program Files\Microsoft SQL Server\MSSQL\Reporting Services\ReportManager. The change needed here is to update <ReportServerUrl>
to include the name used in the certificate.
Finally, the following line in RSReportServer.config governs the master control over SSL:
<Add Key="SecureConnectionLevel" Value="2"/>
Acceptable values are:
3 Most secure—Use SSL for absolutely everything.
2 Secure—Use SSL for rendering and methods that pass credentials but don't insist on it for all SOAP calls.
1 Basic Security—Accepts http but rejects any calls that might be involved in the passing of credentials.
0 Least Secure—Don't use SSL at all.
2 is the value that the installation wizard will input if you install with the Use SSL check box selected, but we prefer to use 3 and ensure that the Report Manager
is also using SSL.
Currently I am marking this thread as “Answered”, if my reply does not help you resolve the problem, please feel free to unmark it. Please also provide the following information and we will be glad to follow up:
The error message after you try the solution above.
Thank-you for your reply to this. I've already tried most of what you suggested except for two points: I have SecureConnectionLevel set to 3 rather that 2 and I'm not sure I matched the case of the URL exactly. I'll double check everything.
Again, thanks for your input. It turns out the solution had nothing to do with the configuration files. I had to go into the registry and add a DisableLoopbackCheck value to the HKEY_Local_Machine\System\CurrentControlSet\Control\Lsa key. This happened to
be the solution for another IIS problem I was having that I thought was unrelated to the Report Server problem.
I made the changes to the RSReportServer.config, RSWebApplication.config and
Disable the loopback check. My problem with the Home, My Subcriptions and Site Settings are resolved. However, the Help link still point to http instead of https. Do you have any problem with your help link?
I set my Key="SecureConnectionLevel" value to 2 instead of 3. I was just wondering if this makes a different.
Thanks for replying. I've already found the loopback check and disabled it. Everything worked fine after that. I believe the "Help" link also showed https: after the check was disabled, but I'm not 100% sure. I won't have access to that machine for a
few days but I'll try to remember and check once I get access again.
I've had "SecureConnectionLevel" set to both 2 and 3 during the course of my troubleshooting. I don't think it will make a difference for this issue.
I have the same problem as described in the first post. To solve this, I tried all your solutions, but non worked. My configuration is a bit special: a server in DMZ with only ReportManager enabled, a server with ReportManager and ReportServer behind a firewall
and a server with the Database. The DMZ server required SSL, so people from the internet must use https. I also implemented custom authentication and authorisation. (based on the sample from Microsoft) Nomatter what I do, the "Home", "My Subscriptions" and
"Search" links keep saying http:// in stead of https://.
The communication with the internal Report Server from the DMZ server had to be SSL too. After changing the custom authentication (different domain name in the cookie) everything worked.
Greetz Eric
I will not reply to e-mail. Use the forum to ask questions.
Luckily yours isn't a situation I had to deal with; I'm running on a single server behind a firewall along with all my users. Thanks for your information. I may have to change my configuration to something similar to yours in the future.
Greg
erictummers
Hello,
I have the same problem as described in the first post. To solve this, I tried all your solutions, but non worked. My configuration is a bit special: a server in DMZ with only ReportManager enabled, a server with ReportManager and ReportServer behind a firewall
and a server with the Database. The DMZ server required SSL, so people from the internet must use https. I also implemented custom authentication and authorisation. (based on the sample from Microsoft) Nomatter what I do, the "Home", "My Subscriptions" and
"Search" links keep saying http:// in stead of https://.
The communication with the internal Report Server from the DMZ server had to be SSL too. After changing the custom authentication (different domain name in the cookie) everything worked.
I found the solution already and edited my post above. The communication between the DMZ server ande the Internal server had to be SSL too. Nou all links are rendered as https://.
Eric
I will not reply to e-mail. Use the forum to ask questions.
CSevern
0 Points
5 Posts
Report Manager Links with SSL
Aug 01, 2008 09:11 PM|LINK
I'm trying to run Reporting Services through SSL. For the most part everything is working, but I still have some minor problems. The links for "Home", "My Subscriptions", etc. in the upper left corner of Report Manager all start with "http://" rather than "https://". The icons for "New Data Source", "Upload File", and "Report Builder" in the toolbar also have the same problem. All the other links and icons point to URLs starting with "https://".
When I click on any of these problem links I get an error saying "https://" is required. If I manually change the address to "https://" the proper page appears.
In RSWebApplication.config I have ReportServerUrl = https://<machine>/ReportServer.
In RSReportServer.config I have SecureConnectionLevel = 3 and UrlRoot = https://<machine>/ReportServer.
What am I missing?
Thank-you,
Greg
Nai-Dong Jin...
All-Star
41630 Points
3558 Posts
Re: Report Manager Links with SSL
Aug 07, 2008 07:33 AM|LINK
Hi,
Try to set the config file according to the following points:
RSReportServer.config
In RSReportServer.config, which you will find in \Program Files\Microsoft SQL Server\MSSQL\Reporting Services\ReportServer, you'll need to locate the <URLRoot> element and update the NetBIOS name to the DNS name, and also the http:// to https://. Take care to use the same case for the letters as you used in the certificate:
So, in our example here we needed to edit the <URLRoot> to be:
<UrlRoot>https://d1.internal.boost.net/ReportServer</UrlRoot>
RSWebApplication.config
You'll find RSWebApplication.config in C:\Program Files\Microsoft SQL Server\MSSQL\Reporting Services\ReportManager. The change needed here is to update <ReportServerUrl> to include the name used in the certificate.
<ReportServerUrl>https://d1.internal.boost.net/ReportServer</ReportServerUrl>
Finally, the following line in RSReportServer.config governs the master control over SSL:
<Add Key="SecureConnectionLevel" Value="2"/>
Acceptable values are:
3 Most secure—Use SSL for absolutely everything.
2 Secure—Use SSL for rendering and methods that pass credentials but don't insist on it for all SOAP calls.
1 Basic Security—Accepts http but rejects any calls that might be involved in the passing of credentials.
0 Least Secure—Don't use SSL at all.
2 is the value that the installation wizard will input if you install with the Use SSL check box selected, but we prefer to use 3 and ensure that the Report Manager is also using SSL.
Thanks.
Nai-Dong Jin...
All-Star
41630 Points
3558 Posts
Re: Report Manager Links with SSL
Aug 08, 2008 08:50 AM|LINK
Hi,
Currently I am marking this thread as “Answered”, if my reply does not help you resolve the problem, please feel free to unmark it. Please also provide the following information and we will be glad to follow up:
The error message after you try the solution above.
Thanks.
CSevern
0 Points
5 Posts
Re: Report Manager Links with SSL
Aug 08, 2008 01:06 PM|LINK
Michael,
Thank-you for your reply to this. I've already tried most of what you suggested except for two points: I have SecureConnectionLevel set to 3 rather that 2 and I'm not sure I matched the case of the URL exactly. I'll double check everything.
Thanks again,
Greg
CSevern
0 Points
5 Posts
Re: Report Manager Links with SSL
Aug 15, 2008 08:31 PM|LINK
Michael,
Again, thanks for your input. It turns out the solution had nothing to do with the configuration files. I had to go into the registry and add a DisableLoopbackCheck value to the HKEY_Local_Machine\System\CurrentControlSet\Control\Lsa key. This happened to be the solution for another IIS problem I was having that I thought was unrelated to the Report Server problem.
Greg
KJP
Member
2 Points
1 Post
Re: Report Manager Links with SSL
Sep 29, 2008 03:50 PM|LINK
Hi Greg,
I made the changes to the RSReportServer.config, RSWebApplication.config and Disable the loopback check. My problem with the Home, My Subcriptions and Site Settings are resolved. However, the Help link still point to http instead of https. Do you have any problem with your help link? I set my Key="SecureConnectionLevel" value to 2 instead of 3. I was just wondering if this makes a different.
Thanks,
Monica
CSevern
0 Points
5 Posts
Re: Report Manager Links with SSL
Oct 01, 2008 02:07 PM|LINK
Monika,
Thanks for replying. I've already found the loopback check and disabled it. Everything worked fine after that. I believe the "Help" link also showed https: after the check was disabled, but I'm not 100% sure. I won't have access to that machine for a few days but I'll try to remember and check once I get access again.
I've had "SecureConnectionLevel" set to both 2 and 3 during the course of my troubleshooting. I don't think it will make a difference for this issue.
Thanks again,
Greg
erictummers
Member
6 Points
3 Posts
Re: Report Manager Links with SSL
Nov 25, 2008 01:19 PM|LINK
Hello,
I have the same problem as described in the first post. To solve this, I tried all your solutions, but non worked. My configuration is a bit special: a server in DMZ with only ReportManager enabled, a server with ReportManager and ReportServer behind a firewall and a server with the Database. The DMZ server required SSL, so people from the internet must use https. I also implemented custom authentication and authorisation. (based on the sample from Microsoft) Nomatter what I do, the "Home", "My Subscriptions" and "Search" links keep saying http:// in stead of https://.
SecureConnectionLevel = 2, UrlRoot=https://mydomain/ReportServer
The communication with the internal Report Server from the DMZ server had to be SSL too. After changing the custom authentication (different domain name in the cookie) everything worked.
Greetz Eric
CSevern
0 Points
5 Posts
Re: Report Manager Links with SSL
Dec 02, 2008 01:35 PM|LINK
Eric
Luckily yours isn't a situation I had to deal with; I'm running on a single server behind a firewall along with all my users. Thanks for your information. I may have to change my configuration to something similar to yours in the future.
Greg
erictummers
Member
6 Points
3 Posts
Re: Report Manager Links with SSL
Dec 03, 2008 05:26 AM|LINK
Thank you for the reply Greg.
I found the solution already and edited my post above. The communication between the DMZ server ande the Internal server had to be SSL too. Nou all links are rendered as https://.
Eric