Configuring a Replication Listener

(Not applicable to Online Data Proxy) Configure the port to receive synchronization requests from client devices.

Prerequisites
A secure synchronization stream uses SSL or TLS encryption. Both TLS and SSL require production-ready certificates to replace the default ones installed with SAP Mobile Server. Ensure that you possess digital certificates verified and signed by third-party trusted authorities. See Encrypting Synchronization for Replication Payloads in Security.
Task
  1. In the left navigation pane, select Configuration .
  2. In the right administration pane, click the General tab.
  3. From the menu bar, select Components.
  4. Select Replication and click Properties.
  5. Select the protocols and ports you require. You can enable any combination of HTTP, HTTPS and mutual HTTPS, but you must enable at least one port.
    • (No encryption): if you do not require SSL encryption, choose Port. SAP Mobile Platform recommends this option if you do not require a secure communication stream for synchronization. By default, the port for HTTP is 2480.
    • (Server authentication): to encrypt the HTTP stream with SSL for authentication, choose Secure port. By default, the port for authentication over HTTPS is 2481. The "Secure Sync Port" properties can be used to review and set the server identity and public certificate for the secure synchronization port. See below.
    • (Mutual authentication): to encrypt the HTTP stream with SSL for transport, choose Mutual secure port. By default, the port for transport over HTTPS is 2482.
  6. (Optional) Configure additional properties for E2EE with TLS, HTTPS with SSL, and synchronization server startup options:
    Note: Leave E2E Encryption values blank to disable end-to-end encryption.
    • E2E Encryption Type – specify the asymmetric cipher used for key exchange for end-to-end encryption. You can only use RSA encryption.
    • E2E Encryption Certificate Alias – specify E2E encryption key pair files alias in the key store. This value must be an alias configured to have a private key.
    • Secure Sync Port Certificate Alias – specify the HTTPS identity file alias in the key store. The value must be an alias configured to have a private key.
    • Trusted Relay Server Certificate Alias – specify the relay server trusted certificate alias in the keystore. The value can be any alias in the server key store.
    • User Options – sets the command line options for starting the synchronization server. These options are appended the next time the synchronization server starts. These are the available user options:
      Option Description
      @ [variable | filePath] Applies listener options from the specified environment variable or text file.
      -a <value> Specifies a single library option for a listening library.
      -d <filePath> Specifies a listening library.
      -e <deviceName> Specifies the device name.
      -f <string> Specifies extra information about the device.
      -gi <seconds> Specifies the IP tracker polling interval.
      -i <seconds> Specifies the polling interval for SMTP connections.
      -l <"keyword=value;..."> Defines and creates a message handler.
      -m Turns on message logging.
      -ni Disables IP tracking.
      -ns Disables SMS listening.
      -nu Disables UDP listening.
      -o <filePath> Logs output to a file.
      Note: Ensure that you enter the absolute file path for this property.
      -os <bytes> Specifies the maximum size of the log file.
      -p Allows the device to shut down automatically when idle.
      -pc [+ | -] Enables or disables persistent connections.
      -r <filePath> Identifies a remote database involved in the responding action of a message filter.
      -sv <scriptVersion> Specifies a script version used for authentication.
      -zf (Recommended in development environments) Causes the SAP Mobile Server replication service to check for script changes at the beginning of each synchronization. Unless this option is used, the service assumes that no script changes have been made, no checks for script changes are performed, once the service starts. For production environments, this option is not recommended due to its negative impact on synchronization performance.
      -t [+ | -] <name> Registers or unregisters the remote ID for a remote database.
      -u <userName> Specifies a synchronization server user name.
      -v [0 | 1 | 2 | 3] Specifies the verbosity level for the messaging log.
      -y <newPassword> Specifies a new synchronization server password.

      Do not use the User Options property in SAP Control Center to pass in these options: -c, -lsc, -q, -w, -x, -zs.

      For more information on synchronization server command line options, see MobiLink Listener options for Windows devices (http://infocenter.sybase.com/help/topic/com.sybase.help.sqlanywhere.12.0.1/mlsisync/ms-listener-s-3217696.html) in the SQL Anywhere® 12.0.1 online help.

  7. Click OK.
    When you set the E2E Encryption Certificate Alias or the Secure Sync Port Certificate Alias , a public key and private key are automatically generated from the selected key store alias.