Configuring SSL on the TIBCO EMS Server

Before using SSL, configure the tibemsd.conf file on the TIBCO Enterprise Message Service (EMS) server.

Procedure

Navigate to the EMS_DATA_HOME/cfmgmt/ems/data directory and open the tibemsd.conf file.
In the Listen ports section, specify the port that accepts SSL connections for the listen parameter. For example: listen = ssl://7243
Note: Ensure that the port number is consistent with the one set for SSL connection factory URL in the factories.conf file. The factories.conf file is in the same directory as the tibemsd.conf file.

In the SSL Server Setup Information section, set values for the following parameters:

Parameter	Description
ssl_server_identity	The digital certificate of the server. Specify the path to the file that contains the certificate. For example: `ssl_server_identity = D:/tibco/ems/8.0/samples/certs/server.cert.pem`
ssl_server_key	The private key of the server. Specify a path to the file that contains the key. For example: `ssl_server_key = D:/tibco/ems/8.0/samples/certs/server.key.pem`
ssl_password	The password for the private key. Set the password. For example: `ssl_server_key = password`

Parameter

Description

ssl_server_identity

The digital certificate of the server. Specify the path to the file that contains the certificate.

For example:

ssl_server_identity = D:/tibco/ems/8.0/samples/certs/server.cert.pem

ssl_server_key

The private key of the server. Specify a path to the file that contains the key.

For example:

ssl_server_key = D:/tibco/ems/8.0/samples/certs/server.key.pem

ssl_password

The password for the private key. Set the password.

For example:

ssl_server_key = password

Keep other parameters with their default values and save the file.
Restart the the EMS server.
For details about how to configure SSL on the EMS server, see the TIBCO Enterprise Message Service documentation.