Applying SSL Certificate to Reporting Server

The SSL certificate on the reporting server is invalid or expired and needs to be updated and applied to SSRS

• Reporting

• SSRS Reports

• Canned reports

• Cashiering reports

• Munis reporting

Certificate has expired and needs to be replaced

• These steps apply to wildcard certificates. If you are not using a wildcard certificate, please contact Tyler Systems Management Support or log a case via the Online Support Client Portal

• .PFX format is the most straightforward way to apply a new certificate. For Tyler support to update the certificate, the .PFX file and the associated password needs to be provided by the client.

• The certificate needs to be imported to the personal certificate store before it can be applied to SSRS.

Step 1 Option 1: Import certificate to personal certificate store with MMC

1. Open MMC (Start > Run > MMC)

2. Click File > Add/Remove Snap In

3. Select Certificates and click Add

4. Select Computer Account > Next > Local computer > Finish

5. Click OK

6. Expand Certificates > Personal > Certificates

7. Right click the Certificates folder and select All Tasks > Import…

8. In the Certificate Import Wizard, click Next

9. Click Browse

10. In the Open window, change the file extension filter to Personal Information Exchange (*.pfx;*.p12)

11. Locate the certificate file and click Open

12. Click Next

13. Enter certificate password

14. If desired, check off Mark this key as exportable

15. Click Next

16. Select Place all certificates in the following store: Personal and hit Next > Finish

17. Old certificates can be removed from the personal store by right clicking and selecting Delete

18. Close the console and select No to Save console settings

Step 1 Option 2: Import certificate to personal certificate store with IIS (if installed on server)

1. Open IIS (Internet Information Services)

2. In the Connections panel, click the server name

3. In the middle section, double click Server Certificates

4. In the Actions panel on the right, click Import

5. Click the ellipses and locate the .pfx certificate file

6. Enter the certificate password

7. Leave Select Certificate Store set to Personal

8. Allow this certificate to be exported can be left checked off unless you would not like it to be exportable

9. Click OK

Step 2: Apply certificate to SSRS

1. Open Report Server Configuration Manager or Reporting Services Configuration Manager 

2. Enter the Server Name 

3. Select the applicable Report Server Instance
   

   1. SQL 2016 and below: TYLERCI

   2. SQL 2017+: SSRS

4. Click Connect

5. Click Web Portal URL (if not listed, skip to Web Service URL)

   1. Click Advanced

   2. Highlight (All IPv4), then click Edit

   3. Select the certificate from the drop down and click OK

   4. Highlight (All IPv6), then click Edit

   5. Select the certificate from the drop down and click OK

   6. Click OK

   7. Wait for the certificate to finish applying

6. Click Web Service URL from the left side

   1. In the HTTPS Certificate drop-down, select the new certificate

   2. Click Apply

   3. Click OK on pop up

7. Test Report Server URL in a browser or test a report from a program

For some client configurations, the certificate needs to be bound to the web site(s) in IIS:

1. In the Connections panel, expand the server and Sites folder by clicking the arrows

2. Right click Default Web Site > Edit Bindings

   1. OR, click Default Web Site, then in the Actions panel, click Bindings…

3. Double click the binding with Type: https

   1. OR, select the binding with type https and click Edit

4. From the SSL Certificate dropdown, select the new certificate

   1. You can click View to review certificate details to verify the correct certificate is selected

5. Click OK, then click Close