# Configuring an HTTPS connection for Talend Data Preparation

To set up an HTTPS secure connection between the different services, as well as with the MongoDB server, you need to edit the application.properties file.

Note that securing the MongoDB connection is not possible if you selected the embedded MongoDB instance during the installation process.

If you want to secure connections with MongoDB using SSL, MongoDB Enterprise Server has to be manually installed on your machine. For more information, refer to the supported MongoDB versions in [Compatible databases](https://help.qlik.com/talend/en-US/installation-guide-linux/8.0/compatible-databases "The following tables provide information on the recommended and supported databases you can use with Talend server modules. Unless stated otherwise, this list is for standalone (or single node) database configurations.").

## Procedure

1. Open the <Data\_Preparation\_Path>/config/application.properties file.
2. To define the path and password of the certificate for the Data Preparation server, edit the following lines:
   ```
   # server TLS setup
   tls.key-store=/path/to/key-store.jks
   tls.key-store-password=key-store_password
   ```
3. To define the path and password of the signing Certificate Authority (CA) that issued the server certificate, edit the following lines:
   ```
   tls.trust-store=/path/to/trust-store.jks
   tls.trust-store-password=trust-store_password
   ```
4. To make the security control more flexible regarding the certificate common name and its URL, edit the following lines:
   ```
   # false to disable hostname verification
   tls.verify-hostname=true
   ```
5. To define the path and password of the signing Certificate Authority (CA) that issued the MongoDB server certificate, edit the following lines:
   ```
   mongodb.ssl=true
   mongodb.ssl.trust-store=/path/to/trus-store.jks
   mongodb.ssl.trust-store-password=trust-store-password
   ```
6. Change the services URLs from http to https:
   ```
   dataset.service.url=https://${public.ip}:${server.port}
   dataset-dispatcher.service.url=https://${public.ip}:${server.port}
   transformation.service.url=https://${public.ip}:${server.port}
   preparation.service.url=https://${public.ip}:${server.port}
   fullrun.service.url=https://${public.ip}:${server.port}
   gateway.service.url=https://${public.ip}:${server.port}
   security.oidc.client.logoutSuccessUrl=https://${public.ip}:${server.port}
   gateway-api.service.url=https://${public.ip}:${server.port}
   zuul.routes.api.url=https://${public.ip}:${server.port}/api
   zuul.routes.upload.url=https://${public.ip}:${server.port}/api
   ```
7. Change the URIs to which the user is redirected after logging in.
   1. Navigate to the <iam\_installation\_path>/config/clients folder.
   2. Open the corresponding client configuration file: tdp-client.json. For further information about this file, see [Linking Talend Identity and Access Management with Talend Data Preparation](https://help.qlik.com/talend/en-US/installation-guide-linux/8.0/linking-talend-identity-and-access-management-with-talend-data-preparation "If you have installed Talend Identity and Access Management manually, you need to create an OIDC client in order to link Talend Identity and Access Management with Talend Data Preparation. Note that this operation is automatically done if you install Talend Identity and Access Management using Talend Installer.").
   3. In the redirect\_uris property, change all URLs from http to https.
   4. Restart Talend Identity and Access Management.

## Results

Talend Data Preparation only supports the Java Key Store (.jks) format to store keys and certificates.