---
schema_version: "1"
id: 50d7062a39f7d4d17f415adeeed96a0910442e1f86cd453f35b91684d308ad56
title: Configure SSL
collection: tableau
version: current
locale: en-us
portal_url: https://docs.salesforce.com/tableau/current/en-us/desktopdeploy/desktop_deploy_ssl.md
canonical_url: https://help.tableau.com/current/desktopdeploy/en-us/desktop_deploy_ssl.htm
source_site: help.tableau.com
content_type: documentation
content_hash: ed176d0f2ab08c60fb0ce7a0e2d1ec933e606a3e16e94a160a9e7f51b2e260cb
description: Configure SSL to connect Tableau Desktop and Prep Builder to a server using SSL.
---
[Skip to main content](#main-content)

# Configure SSL

Optionally, you can configure Secure Socket Layer (SSL) encryption to connect Tableau Desktop and Prep Builder to a server that uses SSL. You will need to make sure that the required root certificate is installed on the computer where Tableau Desktop and Prep are installed.

**Important:** Tableau is upgrading from OpenSSL 3.1.0 to OpenSSL 3.4.0. This change will take place in June 2025 for Tableau Cloud, and version 2025.2.0 for Tableau Desktop and Prep. Tableau Server will begin using OpenSSL 3.4.0 in version 2025.3. This change is important because OpenSSL 3.4.0 defaults to Level-2 security which requires keys of 2048 bits or longer. Tableau has been recommending keys of this length for years, but if you chose to use Level-1 security you will need to generate and deploy new key pairs. If you have been generating and using 2048-bit keys or longer as recommended, no action is necessary. For more information on generating keys, see [Generate an SSL Key](https://help.tableau.com/current/server/en-us/ssl_cert_create.htm#generate-a-key) in the Tableau Server Help.

Work with your IT Department or System Administrator to complete these steps.

For information about how to configure Tableau Server to use SSL encryption, see [Configure External SSL](https://help.tableau.com/current/server/en-us/ssl_config.htm).

## Configure SSL for Tableau Desktop and Tableau Prep Builder

**Windows**

1. Copy the certificate file (.crt) to the computer running Tableau Desktop or Tableau Prep Builder.
2. Double-click the certificate file, click Install Certificate, and then click **Next**.
3. Select Place all certificates in the following store.
    
    Browse to select Trusted Root Certification Authorities and then click OK > Next > Finish.
4. Verify that the SSL Certificate Chain File is configured in Tableau Server.
5. Wait for the certificate to finish importing, then click OK.
6. Verify that there are no duplicate certificates for Tableau Server CA in the Windows certificate store.
    
    1. From the Start menu, type `certmgr`, then open Manage computer certificates.
    2. Navigate to Trusted Root Certification Authorities\> Certificates.
    3. If there are duplicate certificates for Tableau Server, open each one and check the Serial number on the Details tab.
    4. Delete all the Tableau Server certificates with serial numbers that don't match the correct Tableau Server certificate.
    5. Follow steps 3 and 4 for any duplicate Tableau Server certificates in Intermediate Certification Authorities > Certificates.

**Mac**

1. Verify that the SSL Certificate Chain File is configured in Tableau Server.
2. Add the root certificate to your computer's keychain to ensure that the certificate authority is trusted by your computer. For more information, see [Add certificates to a keychain using Keychain Access on Mac](https://support.apple.com/guide/keychain-access/add-certificates-to-a-keychain-kyca2431/mac) in the Apple Support site.
    
    **Disclaimer**: Although we make every effort to ensure links to external websites are accurate, up to date, and relevant, Tableau cannot take responsibility for the accuracy or freshness of pages maintained by external providers. Contact the external site for answers to questions regarding its content.