Enable secure access (SSL/https)

Products

• VMware Smart Assurance

Issue/Introduction

Method of enabling secure http connectivity

Environment

VWatch4Net/M&R 7.x

Resolution

• This article addresses how to complete the following tasks:

  • How to enable SSL in Watch4net
  • How to configure HTTPS in Watch4net
  • How to configure secure access to Watch4net

  To enable SSL in Watch4net, do the following:

  • Copy the keystore file from the following directory:

  APG\Tools\Webservice-Gateway\Default\conf

  • Paste the keystore file to the following directory:

  APG\Web-Servers\Tomcat\Default\conf

  • Open the server.xml file located in the following directory:

  APG\Web-Servers\Tomcat\Default\conf

  • Uncomment/enable the field related to port 58443, and comment the field related to port 58080. Port 58080 is used for http, and port 58443 is used for https. Commenting port 58080 is optional.
  • Add the following line in the same field:

  keystoreFile="conf\keystore" keystorePass="changeit"

  • Example:

    <Connector port="58443" protocol="HTTP/1.1" SSLEnabled="true"
                   maxThreads="150" scheme="https" secure="true"
                   compression="off" compressableMimeType="text/"
                   keystoreFile="conf\keystore" keystorePass="changeit"
                   clientAuth="false" sslProtocol="TLS" URIEncoding="UTF-8" />

    
                 
  • Save and close the server.xml file.
  • Restart Tomcat services.
  • After the preceding changes are complete, the tomcat will respond to the SSL calls. The URL used to login will be

     https://<Serverhostname/IPaddress>:58443/APG

   

   

Additional Information