Configuring Control-M/EM client and Control-M/EM servers to use SSL

Use the following procedure to configure Control-M/EM client and Control-M/EM servers to use SSL.

1. Stop the following Control-M/EM components:
   • CORBA Naming Service
   • Control-M/EM GUI Server (GSR)
   • BMC Batch Impact Manager Server
   • Control-M/Forecast
   • Control-M/Configuration Manager
   • Control-M/EM clients
   • Control-M/EM Global Conditions Server (GCS)
   • Control-M/EM Gateway

   NOTE: On Windows the Naming Service can be stopped only from the Services window. The orbadmin ns stop command cannot stop the Naming Service, because the Control-M Configuration Server depends on it.

   On UNIX use the orbadmin ns stop command.

   When configuring SSL on clusters, the Naming Service must remain online. Otherwise, the new configurations will not be permanent.

2. On UNIX computers only, enter the following command:

   setenv DISPLAY terminal_IP_address

3. Start the Domain Configuration (orbconfigure) wizard with one of the following commands:
   • [UNIX] orbconfigure
   • [Windows] orbconfigure.vbs

   The Domain Configuration window is displayed.

4. In the Domain Settings panel you can configure the following settings, as desired:
   • Select the Use Secure Sockets Layer (SSL) check box.
   • The Use TAO internal configuration file check box is automatically selected. Click Browse to select ssl_client_server.conf from the <Control-M/EM_directory>/etc/ path.
   • To set the Setup Listen Ports, click the drop-down list and select one of the following items:

     Random – This is the default value and is recommended if the component is not behind a firewall. The operating system selects a free port automatically.

     Range – Recommended value for components behind a firewall. Two text boxes are displayed. Specify the lowest and highest ports in these text boxes.

   Click Next to continue to the next panel.

5. The Naming Service panel is displayed.
   • Configure the Host and Port values as desired.
   • To configure the naming service as desired, click Show local settings. The Repository files path and Use TAO internal configuration file text boxes are added to the panel. Specify the full path and name of the configuration file for the secure Naming Service in the Use TAO internal configuration file text box. Click Next.
6. The summary of the Domain Configuration settings is displayed. Click Finish.
7. Restart all the Control-M/EM components.