Configuring secure communication between the web server and GUI Server

Apache Tomcat Web server communicates with the Control-M/EM GUI Server with SSL, using the JacORB implementation of CORBA.

You can find SSL parameters for JacORB in the jacorb.properties file (<Control-M/EM_directory>/etc/jacorb.properties). They are described in SSL parameters for JacORB.

NOTE: For information on creating a keystore for use with Apache Tomcat Web server web components, see Exporting or importing private/public keys.

To configure Apache Tomcat Web server to work with SSL:

1. In the jacorb.properties file, set the jacorb.security.support_ssl parameter to on.

   Depending on whether you are using a Sun JSSE or IBM JSSE implementation (example IBM AIX), uncomment (delete hashtags) necessary code and use either IBMX509 or SunX509, as shown in the following examples:

   Sun JSSE implementation

   #Which algorithms to use to initialize the client/server SSL socket factories

   #Use IbmX509 with IBM JDKs

   jacorb.security.jsse.server.key_manager_algorithm=SunX509

   jacorb.security.jsse.server.trust_manager_algorithm=SunX509

   jacorb.security.jsse.client.key_manager_algorithm=SunX509

   jacorb.security.jsse.client.trust_manager_algorithm=SunX509

   IBM JSSE implementation

   # Which algorithms to use to initialize the client/server SSL socket factories

   # Use IbmX509 with IBM JDKs

   jacorb.security.jsse.server.key_manager_algorithm=IbmX509

   jacorb.security.jsse.server.trust_manager_algorithm=IbmX509

   jacorb.security.jsse.client.key_manager_algorithm=IbmX509

   jacorb.security.jsse.client.trust_manager_algorithm=IbmX509

2. In the Control-M Configuration Manager, recycle the Control-M Web Server.
3. Continue with Configuring secure communication between web application and web server.

To configure Apache Tomcat Web server to work with TCP/IP:

1. Edit the jacorb.properties file manually.
2. Set the jacorb.security.support_ssl parameter to off.
3. In the Control-M Configuration Manager, recycle the Control-M Web Server.