Restarting just Tableau Server may work as well but is not guaranteed. Now run the following command: sudo update-ca-certificatesįor the certificate to be picked up by Tableau Server it is recommended to restart the whole machine. crt.įirst copy certificate file to /usr/local/share/ca-certificates: sudo cp cert.crt /usr/local/share/ca-certificates/cert.cr It means the format for the certificate file is PEM, but the file extension is required to be. Debian-based Linux Stepsįor Debian-based Linux (Debian, Ubuntu, Kubuntu, etc.) use PEM certificate in. Run the following command: sudo update-ca-trustįor the certificate to be picked up by Tableau Server it is recommended to restart the whole machine. The following are the instructions for RPM-based Linux (CentOS, Fedora, Red Hat, etc.).Ĭopy PEM certificate to /etc/pki/ca-trust/source/anchors: sudo cp cert.pem /etc/pki/ca-trust/source/anchors/cert.pem NOTE: you only need certificates (public part) and not private key for it. More examples for how to convert certificate commands are at. to convert DER to PEM run openssl x509 -inform der -in r -out cert.pem One format can be converted to another with OpenSSL. DER is binary and PEM is Base64 encoded DER. PEM and DER are just different encoding for the same data. Some details about specific formats and how they are related can be found at. For the instructions below only PEM and DER are used. There are a few different formats certificate file can be stored in. NOTE: Instructions below may not work for your specific Linux version – check with documentation for your exact system. Remember Rserve sends to Tableau leave certificate only so you may need to install the whole chain as trusted certificates. In this post, I will show you how to install a trusted certificate (root or self-signed certificate) on Linux. Some more details about Tableau and trusted certificates are in this post – Tableau and Trusted Certificates for Analytics Extensions. When running Tableau Server on Linux and need it to connect to secure TabPy or secure Rserve instances (or any other analytics extension over secured channel) for Tableau Server to trust the connection it need to know to trust the certificate analytics extension is using.