Software AG Products 10.7 | Integrate Software AG Products Using Digital Event Services | API Gateway Configuration Guide | Securing Communication between API Gateway and its Components | How do I Configure a Secure Communication Channel between API Gateway and API Portal?
 
How do I Configure a Secure Communication Channel between API Gateway and API Portal?
API Portal is a web-based, self-service portal that enables an organization to securely expose APIs to external developers, partners, and other consumers to help them build their own applications on their desired platforms. You can secure API Portal, a component in an API Management setup, to enable secure communication with the API Gateway instance over HTTPS. This use case explains the steps required for API Gateway to securely communicate with API Portal for sending the runtime events and metrics and API Portal to communicate with API Gateway securely for key requests.
The use case starts when you have API Portal as one of the components, in the API Management setup, to securely communicate with the API Gateway instance using HTTPS. It ends when the secure communication channel is configured between the API Gateway instance and API Portal.
Before you begin
Ensure that you have:
*API Portal 10.2 or later installed
*A basic understanding of API Portal
*The required certificates for API Gateway and API Portal
To configure a secure communication channel between API Gateway and API Portal
1. Configure API Portal as a destination on the HTTPS port.
a. Navigate to Administration > Destinations in the API Gateway user interface.
b. Click API Portal > Configuration.
c. Provide the following information:
*In the Portal configuration section, provide the following details:
*Base URL. The API Portal base URL which API Gateway uses to communicate to API Portal using the HTTPS port. By default, API Portal uses port 18102 for HTTPS communication.
*Username and Password credentials to access API Portal.
*In the Gateway configuration section, provide the following details:
*Base URL. The API Gateway server URL, which API Portal uses to communicate to API Gateway using the HTTPS port. Specify the port 8886 that is configured for HTTPS communication.
*Username and Password credentials to access API Gateway.
d. Click Publish.
This configures API Portal as a destination and creates a communication channel between API Gateway and API Portal over the HTTPS port.
2. Ensure that the keystore and truststore with the required certificates for API Gateway are located at Installation_Dir\common\conf.
3. Ensure that the keystore and truststore with the required certificates for API Portal are located at Installation_Dir\ API_Portal\server\jre\lib\security.
You now have a secure communication channel between API Gateway and API Portal. You can now publish an API, which is enforced with Enable HTTPS/HTTPS policy with the HTTPS option configured, from API Gateway to API Portal and invoke the API from API Portal using the HTTPS endpoint that has been used to publish it to API Portal.