Setting Up SSL Services

Set up SSL services on Replication Server.

1. Include Trusted CA certificates.
   Modify the Open Client/Server™ trusted roots file to include trusted CA certificates.
2. Obtain a Certificate for Each SSL-Enabled Replication Server
   Obtain a certificate from a trusted certificate authority (CA) for each Replication Server accepting SSL connections.
3. Create an Identity File
   Create the identity file that contains the concatenation of a certificate and its corresponding encrypted private key, and that is understood by the SSL Plus software.
4. Add an Encrypted Password to the Configuration File
   Use rs_init to enable SSL on Replication Server and to add or change an encrypted SSL password.
5. Create SSL Entries in the Directory Service
   Create SSL entries in the Replication Server directory service—such as the sql.ini file, the Windows Registry, or an LDAP server, which defines the server address and port numbers, and determines security protocols that are enforced for client connections.
6. Enable or Disable SSL on Replication Server
   You can enable SSL using Replication Server commands or rs_init.
7. Restart Replication Server After SSL Changes
   Stop and start Replication Server for SSL configuration changes to take effect.