SYSVAPPS configuration steps for AT-TLS connection.

Products

• SYSVIEW Performance Management

Issue/Introduction

Is there a way to avoid passing Userid / Password to login to SYSVAPPS?
Don't want to implement API-ML.

Resolution

1. Ensure PTF LU09628 is applied, which added SYSVAPPS support for AT-TLS. Broadcom recommends making sure that SYSVAPPS has the latest maintenance applied though.  After ensuring at least PTF LU14174 is applied, add the `attls` profile in application.yml, as described in the cover letter for LU09628.
2. Work with the security team to make sure that AT-TLS is set up to listen on the port specified in the application.yml (SYSVAPPS configuration file), and uses the keyring/certificate also specified in application.yml. This is handled by the PAGENT policy for the TCP stack.
3. The security team need to generate the client certificate. The certificate gets associated with a specific userid. After the certificate is generated and associated with the userid, it can be exported to wherever the python script will be run.

Additional Information

For further details please refer the section "Configure and Deploy SYSVAPPS (SYSVIEW Application Server)" in the SYSVIEW Performance Management Installing Documentation.