My Client Certificate

SSL Manager User Guide

Trusted Server Certificates

Trusted Server Certificates: On the SSL Settings window in the Trusted Server Certificates field, select the Wrench icon. The Trusted Certificates window appears. which is identical in task options and appearance to the Public Certificates table on the Settings - SSL Manager page. If the Server Certificate Validation is disabled, the destination connector assumes that any certificate it receives is automatically trusted. When Validation is enabled (previous graphic), you can select specific trusted certificates by selecting the Wrench icon next to Trusted Server Certificates. A Trusted Certificates window appears that is identical in task options and appearance to the Public Certificates table on the Settings - SSL Manager page, except for the Trust column (left end of the table) by which you select the desired server certificate. Trusted Certificates Window with Check Boxes for Selecting Certificates Check the boxes of the desired certificates (or select the Select All / Deselect All

SSL Manager User Guide

Saving Changes

Once all necessary fields are complete, select OK on the SSL Settings window. In the Channel Tasks panel, select Save Changes, then deploy the channel. The connector automatically uses the configured SSL settings. You do not need to restart the Mirth® Connect by NextGen Healthcare server. Parent topic: Apply Destination Connector SSL Settings

SSL Manager User Guide

My Server Certificate

On the SSL Settings window, select the Wrench icon next to My Server Certificate. A window appears that is identical in task options and appearance to the My Certificates table on the Settings-- SSL Manager page. Selecting a Certificate on the My Certificates Window Select the desired server certificate, then select OK. Parent topic: Apply Source Connector SSL Settings

SSL Manager User Guide

Apply Destination Connector SSL Settings

On the Channels page, double-click a channel in the Channel list. Select the Destinations tab. In the Connector Type field, select the connector type that supports the SSL Manager (HTTP Sender, Web Service Sender, File Writer in FTP mode). In the SSL Settings section, the SSL Manager is inactive. If you populate the URL field in the HTTP Sender Settings section, the field turns yellow with a Lock icon next to the URL. If you move the pointer over the Lock icon, a tool tip appears that explains the reason for the situation. (Selecting the Lock icon opens a window with the same content as the tool tip.) Adding a URL while the Manager is Inactive In the SSL Settings section - Use SSL Manager field, select Yes to nullify the locked condition and enable all security options and two-way authentication. (The URL field turns green to reflect the change.) Enabling SSL Manager Select the wrench icon to open the SSL Settings window: Items on the SSL Settings Window Item Name Default Value Descrip

SSL Manager User Guide

Trusted Client Certificates

Trusted Client Certificates: On the SSL Settings window, in the Trusted Client Certificates field, select the Wrench icon. The Trusted Certificates window appears. which is identical in task options and appearance to the Public Certificates table on the Settings - SSL Manager page. Trusted Certificates Window: Selecting Certificates and Selecting OK Check the boxes of the desired certificates (or select the Select All / Deselect All links above the list), then select the OK button. If you check [Java Truststore], all cacerts in the default Java TrustStore will be trusted. Note: To view the default Java Truststore contents, double-click the [Java Truststore] row. When you select the OK button, the Trusted Certificates window closes, and the Trusted Client Certificates section of the SSL Settings window reflects your selections. SSL Settings Window Displaying Trusted Client Certificates Parent topic: Apply Source Connector SSL Settings

SSL Manager User Guide

Test SSL Connections

On the HTTP Sender, Web Service Sender, and File Reader/Writer (FTP mode), you can test SSL connectivity using the appropriate connector service. For example, for the HTTP Sender connector, on an Edit Channel - Destinations page - HTTP Sender Settings section, select the Test Connection button. Selecting the Test Connection button in the HTTP Sender Settings section When connections are tested, several possible error messages could appear: If the server presents certificates that are not trusted by the connector, a Warning window appears. Warning window for a certificate chain that is not currently being trusted. This Warning message says that, to proceed, you need to add the certificate in question to the list of trusted certificates. To do this: On the Channel list page, select the channel you'd like to edit. Select the Destination tab. On the Edit Channel page, SSL Settings section, select the Wrench icon. On the SSL Settings window - Trusted Server Certificates, select the Wrench i

My Client Certificate

Recommendations

Trusted Server Certificates

Saving Changes

My Server Certificate

Apply Destination Connector SSL Settings

Trusted Client Certificates

Test SSL Connections

My Client Certificate

Trusted Server Certificates

Saving Changes

My Server Certificate

Apply Destination Connector SSL Settings

Trusted Client Certificates

Test SSL Connections