Maps Do Not Display or Render Incompletely on Tableau Server

Issue

In a workbook with a map view, maps display in Tableau Desktop but not in Tableau Server, or render incompletely (tiles missing, or does not zoom correctly.)

Or, the following error(s) occur:

Your firewall or proxy server is likely preventing Tableau from accessing maps.tableausoftware.com.mapPermission denied when retrieving
Internet communication error: Peer certificate cannot be authenticated with given CA certificates (mapsconfig.tableau.com).

Environment

Tableau Server
A security device (firewall, proxy, and so on) that controls access to the Internet from the computer running Tableau Server.

Resolution

Work with your IT team to perform the steps below:

Step 1

To show online maps, Tableau Server must be able to use the Run As User account to connect to the following map server over port 443 from all nodes of Tableau Server which are running an instance of the vizql process:

Tableau Server Versions 2019.2 and Later:

mapsconfig.tableau.com:443
api.mapbox.com:443

To open access to these addresses, either change the settings of the computer running Tableau Server as described in Configuring Proxies for Tableau Server, or create exceptions directly in the firewall or proxy.

Step 2

If Step 1 does not resolve your issue, in Internet Explorer, add the map server URLs to Trusted Sites on all nodes of Tableau Server which are running an instance of the vizql process.

In Internet Explorer, go to Settings > Internet Options.
On the Security tab, select Trusted Sites, and then click Sites.
In Websites, enter the following map server URLs and then click Add. When finished, click Close.

Tableau Server Versions 2019.2 and Later:

mapsconfig.tableau.com:443
api.mapbox.com:443

Cause

Tableau Server is not able to communicate with Tableau Software's map server.

Additional Information

Very secure environments might implement more complicated ways of providing access. How the request is routed does not really matter as long as Tableau Server can send requests to both sites and receive responses.
If your organization requires static IP addresses in order to make firewall exceptions, see Cannot Create Firewall Rules to Access Mapping Servers in the Tableau Community. Note that this configuration is not recommended as our proxy IPs may change without notice.
It is also possible to use offline maps (less detailed) or deploy a local WMS server as described in Use Web Map Service (WMS) Servers.
In a distributed environment, follow the steps in Resolution for any computer that runs the vizqlserver process.
In Tableau 2019.2 and higher versions, you may need to also add the following to your allowlist:
- mapbox.com
- www.mapbox.com
- api.tiles.mapbox.com
- a.tiles.mapbox.com
- b.tiles.mapbox.com
- c.tiles.mapbox.com
- d.tiles.mapbox.com