My Server Certificate

SSL Manager User Guide

Trusted Client Certificates

Trusted Client Certificates: On the SSL Settings window, in the Trusted Client Certificates field, select the Wrench icon. The Trusted Certificates window appears. which is identical in task options and appearance to the Public Certificates table on the Settings - SSL Manager page. Trusted Certificates Window: Selecting Certificates and Selecting OK Check the boxes of the desired certificates (or select the Select All / Deselect All links above the list), then select the OK button. If you check [Java Truststore], all cacerts in the default Java TrustStore will be trusted. Note: To view the default Java Truststore contents, double-click the [Java Truststore] row. When you select the OK button, the Trusted Certificates window closes, and the Trusted Client Certificates section of the SSL Settings window reflects your selections. SSL Settings Window Displaying Trusted Client Certificates Parent topic: Apply Source Connector SSL Settings

SSL Manager User Guide

Saving Changes

Once all necessary fields are complete, select OK. In the Channel Tasks panel, select Save Changes, then deploy the channel. The channel's source connector will automatically use the server certificates and will trust the client certificates you set. You do not need to restart the Mirth® Connect by NextGen Healthcare server. Parent topic: Apply Source Connector SSL Settings

SSL Manager User Guide

My Client Certificate

My Client Certificate: If the server to which you are connecting requires client (two-way) authentication, select the Wrench icon next to My Client Certificate. A My Certificate window appears that is identical in task options and appearance to the My Certificates table on the Settings - SSL Manager page. Selecting a Certificate on the My Certificate Window Select the desired certificate, then select OK. Parent topic: Apply Destination Connector SSL Settings

SSL Manager User Guide

Apply Source Connector SSL Settings

On the Channels page, double-click a channel in the Channel list. Select the Source tab. In the Connector Type field, select the connector type that supports the SSL Manager (for example, HTTP Listener, Web Service Listener, File Reader in FTP mode). In the SSL Settings section - Enable field, select Yes. Enabling SSL Settings Select the wrench icon to open the SSL Settings window: Items on the SSL Settings Window Item Name Default Value Description A My Server Certificate None Select the local certificate used to identify this listener connector. For additional information, see My Server Certificate B Client Authentication Disabled Disabled: No client authentication is requested. Request: Client certificate is requested but not required. If the client presents a certificate it will be used for extra security. Require: Client certificate is required. If the client does not present a certificate, the handshake will fail. C Client Certificate Validation Enabled If enabled, only the certi

SSL Manager User Guide

Trusted Server Certificates

Trusted Server Certificates: On the SSL Settings window in the Trusted Server Certificates field, select the Wrench icon. The Trusted Certificates window appears. which is identical in task options and appearance to the Public Certificates table on the Settings - SSL Manager page. If the Server Certificate Validation is disabled, the destination connector assumes that any certificate it receives is automatically trusted. When Validation is enabled (previous graphic), you can select specific trusted certificates by selecting the Wrench icon next to Trusted Server Certificates. A Trusted Certificates window appears that is identical in task options and appearance to the Public Certificates table on the Settings - SSL Manager page, except for the Trust column (left end of the table) by which you select the desired server certificate. Trusted Certificates Window with Check Boxes for Selecting Certificates Check the boxes of the desired certificates (or select the Select All / Deselect All

SSL Manager User Guide

Test SSL Connections

On the HTTP Sender, Web Service Sender, and File Reader/Writer (FTP mode), you can test SSL connectivity using the appropriate connector service. For example, for the HTTP Sender connector, on an Edit Channel - Destinations page - HTTP Sender Settings section, select the Test Connection button. Selecting the Test Connection button in the HTTP Sender Settings section When connections are tested, several possible error messages could appear: If the server presents certificates that are not trusted by the connector, a Warning window appears. Warning window for a certificate chain that is not currently being trusted. This Warning message says that, to proceed, you need to add the certificate in question to the list of trusted certificates. To do this: On the Channel list page, select the channel you'd like to edit. Select the Destination tab. On the Edit Channel page, SSL Settings section, select the Wrench icon. On the SSL Settings window - Trusted Server Certificates, select the Wrench i

My Server Certificate

Recommendations

Trusted Client Certificates

Saving Changes

My Client Certificate

Apply Source Connector SSL Settings

Trusted Server Certificates

Test SSL Connections

Trusted Client Certificates

Saving Changes

My Client Certificate

Apply Source Connector SSL Settings

Trusted Server Certificates

Test SSL Connections