Enabling SSL for DA Server to DA Agent RMI Communication

Configure the DA server and the remote DA agent to use SSL to encrypt all RMI network communication.

1. Configure DA agent.
   1. Establish a command line tool (CLT) session to the DA agent.
   2. Ensure that you have a keystore configured. If you have already enabled SSL for DA server to DA agent DTS communication, you can skip this step.
      To configure a keystore, issue these commands:

      sslconfig keystore location_of_keystore_file
      go
      sslconfig keystore_passwd password
      go
      sslconfig keypair_passwd password
      go

   3. Set the rmi_server_ssl_enabled option to true:

      sslconfig rmi_server_ssl_enabled true
      go

   4. Restart DA agent.
2. Configure DA server.
   1. Ensure that you have a truststore configured. If you have already enabled SSL for DA server to DA agent DTS communication, you can skip this step.
      To configure a truststore, issue these commands:

      sslconfig truststore truststore_file_location
      go
      sslconfig truststore_passwd password
      go
      

   2. Set the DA agent host name in the rmi_client_ssl_required host list:

      sslconfig rmi_client_ssl_required host_list
      go
      

      The host list parameter is a comma-delimited list of DA agent hosts that require SSL-enabled DTS.
   3. Restart DA server.