Replacing the Default SSL Certificate
ActiveTransfer uses a default SSL certificate, installed with ActiveTransfer, for the following purposes:
To facilitate communication between
ActiveTransfer Server and
ActiveTransfer GatewayTo facilitate communication through SSL ports when specific SSL certificates are not configured for those ports
The default SSL certificate is adequate for demo or testing purposes. However, in production environments, Software AG strongly recommends replacing this default certificate with your own certificate.
1. Obtain an SSL certificate for your organization in JKS format. Save this certificate in the following directory on ActiveTransfer Server and, if you are using a gateway, ActiveTransfer Gateway:
Integration Server_directory \instances\instance_name\packages\WmMFT\resources
2. Open the ActiveTransfer security configuration file (security.cnf), located in the Integration Server_directory \instances\instance_name\packages\WmMFT\config directory, and update the following properties:
mft.ssl.privatekey.password: Provide the private key password for the replacement default certificate.
mft.ssl.keystore.password: Provide the keystore password for the replacement default certificate.
mft.ssl.certificate.file.name: Provide the file name of the replacement default certificate.
3. Restart Integration Server.
Important: Software AG strongly recommends restarting Integration Server now. Doing so deletes the password text strings from the security configuration file and enables you to restart Integration Server in the future without being prompted to supply the certificate passwords.