Trusted Client Certificates

SSL Manager User Guide

My Server Certificate

On the SSL Settings window, select the Wrench icon next to My Server Certificate. A window appears that is identical in task options and appearance to the My Certificates table on the Settings-- SSL Manager page. Selecting a Certificate on the My Certificates Window Select the desired server certificate, then select OK. Parent topic: Apply Source Connector SSL Settings

SSL Manager User Guide

Trusted Server Certificates

Trusted Server Certificates: On the SSL Settings window in the Trusted Server Certificates field, select the Wrench icon. The Trusted Certificates window appears. which is identical in task options and appearance to the Public Certificates table on the Settings - SSL Manager page. If the Server Certificate Validation is disabled, the destination connector assumes that any certificate it receives is automatically trusted. When Validation is enabled (previous graphic), you can select specific trusted certificates by selecting the Wrench icon next to Trusted Server Certificates. A Trusted Certificates window appears that is identical in task options and appearance to the Public Certificates table on the Settings - SSL Manager page, except for the Trust column (left end of the table) by which you select the desired server certificate. Trusted Certificates Window with Check Boxes for Selecting Certificates Check the boxes of the desired certificates (or select the Select All / Deselect All

SSL Manager User Guide

Apply Source Connector SSL Settings

On the Channels page, double-click a channel in the Channel list. Select the Source tab. In the Connector Type field, select the connector type that supports the SSL Manager (for example, HTTP Listener, Web Service Listener, File Reader in FTP mode). In the SSL Settings section - Enable field, select Yes. Enabling SSL Settings Select the wrench icon to open the SSL Settings window: Items on the SSL Settings Window Item Name Default Value Description A My Server Certificate None Select the local certificate used to identify this listener connector. For additional information, see My Server Certificate B Client Authentication Disabled Disabled: No client authentication is requested. Request: Client certificate is requested but not required. If the client presents a certificate it will be used for extra security. Require: Client certificate is required. If the client does not present a certificate, the handshake will fail. C Client Certificate Validation Enabled If enabled, only the certi

SSL Manager User Guide

Manage Certificates

You can manage certificates and key pairs on the Settings > SSL Manager page. The Global Settings section (top) allows you to configure certificate expiration warning settings. More information here: SSL Manager Global Settings The Public Certificates table (middle) displays certificates (public keys only) that you trust. These could be server certificates returned to a destination connector or client certificates returned to a source connector. The My Certificates table (bottom) displays certificates (public and private key pairs) that identify your server directly. These could be server certificates used by a source connector or client certificates used by a destination connector. SSL Manager tab with Global Settings, Public Certificates, and My Certificates sections Double-click any row in a certificate list to open the Certificate Information window, on which you can view details about the selected certificate. Certificate Information window with editable Certificate Alias field an

SSL Manager User Guide

My Client Certificate

My Client Certificate: If the server to which you are connecting requires client (two-way) authentication, select the Wrench icon next to My Client Certificate. A My Certificate window appears that is identical in task options and appearance to the My Certificates table on the Settings - SSL Manager page. Selecting a Certificate on the My Certificate Window Select the desired certificate, then select OK. Parent topic: Apply Destination Connector SSL Settings

SSL Manager User Guide

Apply Destination Connector SSL Settings

On the Channels page, double-click a channel in the Channel list. Select the Destinations tab. In the Connector Type field, select the connector type that supports the SSL Manager (HTTP Sender, Web Service Sender, File Writer in FTP mode). In the SSL Settings section, the SSL Manager is inactive. If you populate the URL field in the HTTP Sender Settings section, the field turns yellow with a Lock icon next to the URL. If you move the pointer over the Lock icon, a tool tip appears that explains the reason for the situation. (Selecting the Lock icon opens a window with the same content as the tool tip.) Adding a URL while the Manager is Inactive In the SSL Settings section - Use SSL Manager field, select Yes to nullify the locked condition and enable all security options and two-way authentication. (The URL field turns green to reflect the change.) Enabling SSL Manager Select the wrench icon to open the SSL Settings window: Items on the SSL Settings Window Item Name Default Value Descrip

Trusted Client Certificates

Recommendations

My Server Certificate

Trusted Server Certificates

Apply Source Connector SSL Settings

Manage Certificates

My Client Certificate

Apply Destination Connector SSL Settings

My Server Certificate

Trusted Server Certificates

Apply Source Connector SSL Settings

Manage Certificates

My Client Certificate

Apply Destination Connector SSL Settings