Enabling SSL in zone 2 and 3

This procedure describes how to enable SSL in zone 2 and 3.

To enable SSL in zone 2 and 3:

1. Enable SSL on Control-M/Server by doing the following:
   1. Run the ctmsys utility.
   2. Press 2 - System Parameters.
   3. Press n to move to the next page of parameters.
   4. Set option 9 Secure Sockets Layer to ENABLED.

      By default, all connected Control-M/Agents are now configured with SSL.

   5. Restart the Control-M/Server Configuration Agent and the Control-M/Server component.
2. Enable SSL on each Control-M/Agent by doing the following:
   1. Restart the Control-M/Agent if you deployed a new certificate.
   2. From the CCM, right-click the required Control-M/Agent and select Properties and then click the Communication.
   3. From the Secure Socket Layer drop-down list, select Default.

      This inherits the value from the Control-M/Server configuration.

   4. Click Test.
   5. After the test has validated the settings, click OK.
3. Enable SSL on the CMS and Gateway components by doing the following:
   1. From the CCM, change the value of the CmsCommMode system parameter to AUTO or to SSL.
   2. Restart the Control-M/EM Configuration Agent, Naming Service, and CMS.
   3. Recycle the Gateway(s) that are connected to the Control-M/Servers where SSL is configured.