Using SSL

ARIS Publisher is an Apache-TomcatTM-based runnable with HTTPS support. As ARIS Publisher cannot be accessed through the ARIS loadbalancer, HTTPS, connections must be configured manually.

Prerequisites

You have access to a valid certificate acquired from an official certificate authority (CA). For ARIS Publisher Server certificates please refer to Apache TomcatTM SSL/TLS documentation.

Procedure

  1. Start ARIS Cloud Controller on your ARIS Publisher Server.
  2. Enter: stop businesspublisher_<s, m, or l>

    The runnable will be stopped.

  3. Enter: reconfigure businesspublisher_<s, m, or l> connector.https.port =<free port number>

    A HTTPS connector is listening on the port you have specified.

  4. Enter: enhance <instanceID> with keystore <enhancement>

    where <enhancement> can either refer to a file in the ARIS agent remote repository, specified as a path relative to the repository root, by prefixing the relative path with the path keyword:

    for example enhance businesspublisher_m with keystore path repo/keystores/mykeystore.jks

    Or it can be specified by referring to a file located on the same machine as the <a_> agent in which the runnable is running, using a local file enhancement:

    for example enhance businesspublisher_m with keystore local file "d:\\keystores\\mykeystore.jks"

    Notice the double backslashes using quotation. Alternatively, use single forward slashes, for example, "c:/temp/lbcert.zip".

    Warning

    Make sure not to copy the file within the runnable's working directory. The file will be overwritten with a place holder file the next time you update the runnable.

  5. Enter: start businesspublisher_<s, m, or l>

SSL is configured for ARIS Publisher.

In addition to enabling the HTTPS connector, configuration parameters might have to be set.