Securing the Identity Suite management console. It is only available on an insecure port after deployment

Products

• CA Identity Suite

Issue/Introduction

In CA Identity Suite V15, the management console defaults to an insecure port by design. Secure HTTPS access is not enabled until it is explicitly configured in the deployment console and the cluster services are restarted to apply the security settings.

Environment

• Product: CA Identity Suite V15
• Components: Identity Manager (IM), Identity Portal (IP), IGA Xpress (v1.0)
• Configuration: Deployment using IGA Xpress deployment console

Cause

By design, the CA Identity Suite V15 management console defaults to an insecure port. Secure HTTPS access must be explicitly configured in the deployment console and followed by a cluster restart to apply the security settings

Resolution

To enable secure HTTPS access to the management console, follow these steps:

1. Log in to the IGA Xpress console using the secure address: https://[hostname]:10443 Insecure Port Resolution.
2. Navigate to the Cluster tab.
3. Verify the server certificate settings. For more detailed directions on certificate handling see Custom Server Certificates
4. Click the Restart Cluster icon. This action is required to commit the configuration changes and initialize the secure port Insecure Port Resolution.
5. Once the services have fully restarted, confirm that the console is accessible via the secure HTTPS address Insecure Port Resolution.