Enabling SSL for DA Server to DA Agent DTS Communication

Configure the DA server and the remote DA agent to use SSL to encrypt all DTS network communication.

1. Configure DA agent.
   1. Establish a command line tool (CLT) session to the DA agent.
   2. Ensure that you have a keystore configured. If you have already enabled SSL for DA server to DA agent RMI communication, you can skip this step.
      To configure a keystore, issue these commands:

      sslconfig keystore location_of_keystore_file
      go
      sslconfig keystore_passwd password
      go
      sslconfig keypair_passwd password
      go

   3. Set the dts_client_ssl_required option to true:

      sslconfig dts_client_ssl_required true
      go

   4. Restart DA agent.
2. Configure DA server.
   1. Ensure that you have a truststore configured. If you have already enabled SSL for DA server to DA agent RMI communication, you can skip this step.
      To configure a truststore, issue these commands:

      sslconfig truststore truststore_file_location
      go
      sslconfig truststore_passwd password
      go
      

   2. Set the DA agent host name in the dts_client_ssl_required host list:

      sslconfig dts_client_ssl_required host_list
      go
      

      The host list parameter is a comma-delimited list of DA agent hosts that require SSL-enabled DTS.
   3. Restart DA server.