# Domain and HTTPS configuration
This part of the configuration determines how your ExtensionsManager and products are accessed and secured.
**Domain Setup**
You can define a custom domain for both the **Extensions Manager** and your extensions.\
The domain controls how Tableau and other services connect to your environment.
* **Default:** `localhost`
* When entering a custom domain, **do not** include `http://` or `https://`.
✅ **Good Example:**
```
extensionsmanager.infotopics.com
```
❌ **Incorrect Example:**
```
https://extensionsmanager.infotopics.com/
```
**HTTPS Setup**
Using **HTTPS** enables secure communication between Tableau, the Extensions Manager, and your server.\
It is **required** when using a domain other than `localhost`.\
\
When enabling HTTPS, you can choose which TLS version the server should allow.
* The recommended setting is TLS 1.2 (this is the default). This version offers strong security and broad compatibility.
* You may choose TLS 1.3 as the minimum version for even stricter security (supported by modern clients).
* Lowering the TLS version below 1.2 is strongly discouraged and should only be done if you fully understand the risks, as older versions contain known vulnerabilities.
* If unsure, leave this setting at the default (TLS 1.2).
When enabling HTTPS, you must provide SSL certificate details:
* Either two separate files (`.crt` and `.key`), or
* One combined SSL file (e.g., `.pem`).
Once HTTPS is active:
* Connections will be encrypted and verified against the specified domain.
{% hint style="info" %}
Be sure the key file is unencrypted.
{% endhint %}
How to decrypt an encrypted private key
1. Open keyfile and check if it starts with -----BEGIN PRIVATE KEY-----
If there is something above this line, delete it. (Same applies to certificates!)
2. Open your keyfile and check if it is encrypted. (Encrypted private keys start with -----BEGIN ENCRYPTED PRIVATE KEY-----) When it is encrypted, you need to decrypt it. You can do that via openssl (if installed on your machine) in your terminal using the following command:
`openssl rsa -in -out `
