Skip to main content
Version: 24.3.x

Enabling HTTPS

Add the following parameter to dremio.conf on your coordinator nodes:

services.coordinator.web.ssl.enabled: true

This will automatically generate a self-signed certificated. Go to https://<DREMIO_COORDINATOR>:9047.

caution

Using a self-signed certificate in production is not recommended for security reasons. Most browsers will also warn users when loading the UI in this mode.

Custom SSL keyStore and trustStore settings

Custom SSL keyStore and trustStore can be set using dremio.conf file. If the following are set Dremio will not auto-generate a self-signed certificate.

note

In Dremio 24+, the following properties in dremio.conf can be encrypted using the dremio-admin encrypt CLI command:

  • keyStorePassword
  • trustStorePassword
services.coordinator.web.ssl.keyStore: "path/to/keystore/jks/file",
services.coordinator.web.ssl.keyStorePassword: "keyStorePassword",
services.coordinator.web.ssl.trustStore: "path/to/trustStore", (Optional)
services.coordinator.web.ssl.trustStorePassword: "trustStorePassword" (Optional)