Configuring Control-M/EM API JacORB

The SSL parameters for JacORB are in the jacorb.properties file. This file is in the following Control-M/Enterprise Manager directory:

<EM API>/etc/keystore

These parameters are described in the following table:

SSL parameters for JacORB in the jacorb.properties file

Parameter	Description
jacorb.security.support_ssl	Indicates whether SSL is enabled. Valid values: on (use the SSL protocol), off (use the TCP/IP protocol). Default: off.
jacorb.security.keystore	Contains the full path and name of the keystore file.
jacorb.security.keystore_ password	Contains the keystore file password.
jacorb.security.keystore_ password_crypt	Indicates whether the keystore file password is encrypted. Valid values: on (yes), off (no). Default: off.

To configure Control-M/EM APIs to use the SSL protocol:

Run emapi-configure with the -ssl option, or edit the jacorb.properties file manually as follows:
1. Set the jacorb.security.support_ssl parameter to on.
2. Set the ORBInitRef.NameService parameter to corbaloc:ssliop:ns_host:ns_port/NameService (replace ns_host and ns_port with the correct values).
For information about emapi-configure, see Control-M/EM API Installation.
JacORB client on IBM (example IBM AIX) must set the following parameters in jacorb.properties file (for IBM JSSE implementation):
jacorb.security.jsse.server.key_manager_algorithm=IbmX509

jacorb.security.jsse.server.trust_manager_algorithm=IbmX509

jacorb.security.jsse.client.key_manager_algorithm=IbmX509

jacorb.security.jsse.client.trust_manager_algorithm=IbmX509

The default value for all the parameters above is SunX509 (Sun JSSE implementation).

The jacorb.properties file is located in the following directory:

<EM API>/etc/jacorb.properties

To configure Control-M/EM APIs to use the TCP/IP protocol:

Run emapi-configure without the -ssl option, or edit the jacorb.properties file manually as follows:
1. Set the jacorb.security.support_ssl parameter to off.
2. Set the ORBInitRef.NameService parameter to corbaloc:iiop:ns_host:ns_port/NameService (replace ns_host and ns_port with the correct values).