Trusted Server Certificates

SSL Manager User Guide

My Client Certificate

My Client Certificate: If the server to which you are connecting requires client (two-way) authentication, select the Wrench icon next to My Client Certificate. A My Certificate window appears that is identical in task options and appearance to the My Certificates table on the Settings - SSL Manager page. Selecting a Certificate on the My Certificate Window Select the desired certificate, then select OK. Parent topic: Apply Destination Connector SSL Settings

SSL Manager User Guide

Apply Destination Connector SSL Settings

On the Channels page, double-click a channel in the Channel list. Select the Destinations tab. In the Connector Type field, select the connector type that supports the SSL Manager (HTTP Sender, Web Service Sender, File Writer in FTP mode). In the SSL Settings section, the SSL Manager is inactive. If you populate the URL field in the HTTP Sender Settings section, the field turns yellow with a Lock icon next to the URL. If you move the pointer over the Lock icon, a tool tip appears that explains the reason for the situation. (Selecting the Lock icon opens a window with the same content as the tool tip.) Adding a URL while the Manager is Inactive In the SSL Settings section - Use SSL Manager field, select Yes to nullify the locked condition and enable all security options and two-way authentication. (The URL field turns green to reflect the change.) Enabling SSL Manager Select the wrench icon to open the SSL Settings window: Items on the SSL Settings Window Item Name Default Value Descrip

SSL Manager User Guide

Trusted Client Certificates

Trusted Client Certificates: On the SSL Settings window, in the Trusted Client Certificates field, select the Wrench icon. The Trusted Certificates window appears. which is identical in task options and appearance to the Public Certificates table on the Settings - SSL Manager page. Trusted Certificates Window: Selecting Certificates and Selecting OK Check the boxes of the desired certificates (or select the Select All / Deselect All links above the list), then select the OK button. If you check [Java Truststore], all cacerts in the default Java TrustStore will be trusted. Note: To view the default Java Truststore contents, double-click the [Java Truststore] row. When you select the OK button, the Trusted Certificates window closes, and the Trusted Client Certificates section of the SSL Settings window reflects your selections. SSL Settings Window Displaying Trusted Client Certificates Parent topic: Apply Source Connector SSL Settings

SSL Manager User Guide

Test SSL Connections

On the HTTP Sender, Web Service Sender, and File Reader/Writer (FTP mode), you can test SSL connectivity using the appropriate connector service. For example, for the HTTP Sender connector, on an Edit Channel - Destinations page - HTTP Sender Settings section, select the Test Connection button. Selecting the Test Connection button in the HTTP Sender Settings section When connections are tested, several possible error messages could appear: If the server presents certificates that are not trusted by the connector, a Warning window appears. Warning window for a certificate chain that is not currently being trusted. This Warning message says that, to proceed, you need to add the certificate in question to the list of trusted certificates. To do this: On the Channel list page, select the channel you'd like to edit. Select the Destination tab. On the Edit Channel page, SSL Settings section, select the Wrench icon. On the SSL Settings window - Trusted Server Certificates, select the Wrench i

SSL Manager User Guide

Manage Certificates

You can manage certificates and key pairs on the Settings > SSL Manager page. The Global Settings section (top) allows you to configure certificate expiration warning settings. More information here: SSL Manager Global Settings The Public Certificates table (middle) displays certificates (public keys only) that you trust. These could be server certificates returned to a destination connector or client certificates returned to a source connector. The My Certificates table (bottom) displays certificates (public and private key pairs) that identify your server directly. These could be server certificates used by a source connector or client certificates used by a destination connector. SSL Manager tab with Global Settings, Public Certificates, and My Certificates sections Double-click any row in a certificate list to open the Certificate Information window, on which you can view details about the selected certificate. Certificate Information window with editable Certificate Alias field an

SSL Manager User Guide

Apply Source Connector SSL Settings

On the Channels page, double-click a channel in the Channel list. Select the Source tab. In the Connector Type field, select the connector type that supports the SSL Manager (for example, HTTP Listener, Web Service Listener, File Reader in FTP mode). In the SSL Settings section - Enable field, select Yes. Enabling SSL Settings Select the wrench icon to open the SSL Settings window: Items on the SSL Settings Window Item Name Default Value Description A My Server Certificate None Select the local certificate used to identify this listener connector. For additional information, see My Server Certificate B Client Authentication Disabled Disabled: No client authentication is requested. Request: Client certificate is requested but not required. If the client presents a certificate it will be used for extra security. Require: Client certificate is required. If the client does not present a certificate, the handshake will fail. C Client Certificate Validation Enabled If enabled, only the certi

Trusted Server Certificates

Recommendations

My Client Certificate

Apply Destination Connector SSL Settings

Trusted Client Certificates

Test SSL Connections

Manage Certificates

Apply Source Connector SSL Settings

My Client Certificate

Apply Destination Connector SSL Settings

Trusted Client Certificates

Test SSL Connections

Manage Certificates

Apply Source Connector SSL Settings