> For the complete documentation index, see [llms.txt](https://docs.collibra.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.collibra.com/platform-self-hosted/collibra-platform-self-hosted-installation-and-upgrade/collibra-platform-self-hosted-installation/configure-ssl-to-access-collibra-platform-self-hosted.md).

# Configure SSL to access Collibra Platform Self-Hosted

If you want to connect to Collibra Platform Self-Hosted in a secure way with your web browser, you have to use SSL. This procedure explains how you can activate SSL access to CPSH.

{% hint style="success" %}
For secure communication from CPSH to other services, for example an LDAP server, see [Configure the SSL settings](https://productresources.collibra.com/docs/collibra/latest/Default.htm#cshid=DOC1877).
{% endhint %}

## Prerequisites

* You have knowledge of the JSON syntax.
* You have created a Java KeyStore according the procedure described by [Oracle](http://docs.oracle.com/cd/E19509-01/820-3503/ggfen/), for example **clientkeystore**.
* You have noted the following data while creating the Java KeyStore:
  * KeyStore file name: *clientkeystore* in the Oracle example.
  * KeyStore alias: *client* in the Oracle example.
  * KeyStore password: The password that you entered after executing the command of the first step in the Oracle example.
  * KeyStore alias password: The password that you entered as last step of step 2 in the Oracle example.
* You have stored the Java KeyStore on the server that hosts the DGC service in the **\<collibra\_data>/dgc/security** folder, for example **/opt/collibra\_data/dgc/security**.

## Steps

{% stepper %}
{% step %}
Open a terminal session on the node on which the DGC service is installed.
{% endstep %}

{% step %}
Open the file **\<collibra\_data>/dgc/config/server.json** for editing.
{% endstep %}

{% step %}
Fill in the following parameters in the **httpsConnector** section:

<table><thead><tr><th width="152">Parameter</th><th>Description</th></tr></thead><tbody><tr><td>port</td><td><p>The port on which the HTTPS connector must bind. The value must be higher than 1024 to avoid root permissions.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>If you want to use the default SSL port 443, you have to use a reverse proxy.</p></div></td></tr><tr><td>keyAlias</td><td>The KeyStore alias.</td></tr><tr><td>keyPass</td><td>The KeyStore alias password.</td></tr><tr><td>keystorePass</td><td>The KeyStore password.</td></tr><tr><td>keystoreFile</td><td>The full path to the KeyStore file name, for example <strong>/opt/collibra_data/dgc/security/clientkeystore</strong>.</td></tr><tr><td colspan="2"><div data-gb-custom-block data-tag="tabs"><div data-gb-custom-block data-tag="tab" data-title="Example" data-icon="glasses-round"><pre class="language-json"><code class="lang-json">"httpsConnector" : {
    "port": 5404,
    "keyAlias": "your-alias",
    "keyPass": "your-password",
    "keystorePass": "your-password",
    "keystoreFile": "/opt/collibra_data/dgc/security/collibradgc.jks" },
}
</code></pre></div></div></td></tr></tbody></table>
{% endstep %}

{% step %}
Save and close the file.
{% endstep %}

{% step %}
Open Collibra Console with a user profile that has the **SUPER** role.\ <i class="fa-chevrons-right">:chevrons-right:</i> Collibra Console opens with the **Infrastructure** page.
{% endstep %}

{% step %}
Open the DGC service settings for editing:

1. Click the **General settings** section.
2. Update the **Base URL** parameter with *https* and the new port.
   {% endstep %}

{% step %}
Restart the environment.
{% endstep %}
{% endstepper %}

## Extra

To prevent regular HTTP traffic to Collibra Platform Self-Hosted, update the **address** parameter with the value *127.0.0.1* in **\<collibra\_data>/dgc/config/server.json** and restart the environment.

This will not prevent the administration tools, for example Collibra Console, from connecting to CPSH without SSL.

For more information, go to the knowledge base on the [Collibra Support Portal](https://support.collibra.com/hc/en-us/articles/4408527971217-How-to-set-up-SSL-HTTPS-for-on-prem-or-Private-Cloud-hosted-Collibra-Data-Governance-Center).