Optimize 10.3.0 | webMethods Optimize Documentation | Administering webMethods Optimize | For System Administrators | Configuring Optimize | Securing Optimize Engines with SSL | Securing the Optimize Analytic Engine Web Services
 
Securing the Optimize Analytic Engine Web Services
The webMethods Optimize Analytic Engine exposes web services used by the user interfaces deployed in My webMethods Server. By default these services are bound to port 12503 and the http protocol. This section describes how to change the web services protocol to "https". These instructions assume that you have configured the Analytic Engine's Key and Trust Stores as described in Configuring Optimize Web Services for SSL, and that you have changed the Configuration Agent Endpoint protocol to enable SSL as described in Changing the Configuration Agent Protocols. Once the Certificate configuration has been completed the Analytic Engine's Web Service Registry Endpoint protocol must be changed to "https".
*To update the Analytic Engine Web Service Protocol to use HTTPS:
1. Shut down Analytic Engine.
2. Open the Software AG_directory \optimize\analysis\conf\system\EndpointRegistry.xml file.
3. Locate the Web Service Registry (WS Registry) Protocol configuration, and change the setting from “http” to “https”.
4. Start Analytic Engine.
After starting Analytic Engine you should see the following message:
[STARTUP] Glue 8.0 Fix 2 build 3
[STARTUP] soap/http server started on https://<server
name>.ame.ad.sag:15000/services
[STARTUP] soap/http server started on https://<server
name>.ame.ad.sag:12503/services
After manual modifications of the endpoint Registry, any Central Configuration environment that includes the updated Analytic Engine Logical Server should be updated and its configuration redeployed to keep both consistent. This procedure is analogous to what was done to update the Configuration Agent endpoint in Changing the Configuration Agent Protocols. For more information, see the instructions on Mapping Endpoints in Configuring BAM.
Note:
Now that the protocol has been changed for the Analytic Engine Web Service Registry, it is necessary, at the very least, that the Trust Store be configured in the My webMethods product. If you do not set up the trusted keys in My webMethods Server, all web service invocations to the Analytic Engine will fail.