Configuring Control-M Self Service and Control-M Workload Change Manager web components

The Control-M Self Service and Control-M Workload Change Manager web components support communicating with the Control-M/EM GUI Server with SSL using JacORB implementation of CORBA.

SSL parameters for JacORB can be found in the jacorb.properties file located in the following directory:

<Control-M/EM_directory>/etc/jacorb.properties

SSL parameters for JacORB in the jacorb.properties file

Parameter	Description
jacorb.security.support_ssl	Indicates whether SSL is enabled. Valid values: on (use the SSL protocol), off (use the TCP/IP protocol). Default: off.
jacorb.security.keystore	Contains the full path and name of the keystore file.
jacorb.security.keystore_ password	Contains the keystore file password.

Note: For information on creating a keystore for use with the Control-M Self Service or Control-M Workload Change Manager web components, see Exporting or importing private/public keys.

To configure Control-M Self Service or Control-M Workload Change Manager web components to work with SSL:

In the jacorb.properties file, set the jacorb.security.support_ssl parameter to on.
JacORB client on IBM (example IBM AIX) must set the following parameters in jacorb.properties file (for IBM JSSE implementation):
jacorb.security.jsse.server.key_manager_algorithm=IbmX509

jacorb.security.jsse.server.trust_manager_algorithm=IbmX509

jacorb.security.jsse.client.key_manager_algorithm=IbmX509

jacorb.security.jsse.client.trust_manager_algorithm=IbmX509

The default value for all the above parameters above is SunX509 (Sun JSSE implementation).
From the CCM, recycle the Control-M Web Server.
Continue with Configuring Control-M/EM Web Server to work with HTTPS

To configure Control-M Self Service or Control-M Workload Change Manager web components to work with TCP/IP

Edit the jacorb.properties file manually.
Set the jacorb.security.support_ssl parameter to off.

Parent Topic

Configuring Control-M components to use SSL