Setting Up a Node as a Security Domain Controller

For some features of TIBCO ActiveSpaces security, the settings in the security policy file work in conjunction with calls to the security API in your application. Depending upon the type of security feature you implement, you might need to modify your application to use the features provided by the security API. See the sections for the individual security features to learn how to implement a particular security feature.

Procedure

  1. Create a security policy file using the Admin CLI.
  2. Edit the Metaspace Access List for the security domain in the security policy file.
  3. Ensure that there is a metaspace_access entry with the metaspace name and discovery URL for the metaspace the node will connect to, in the Metaspace Access List.
  4. Review the Transport Security, Restricted Transport Access, Authentication, Data Encryption, and Access Control settings to ensure they are set to meet your security requirements.
  5. Save your changes to the security policy file.
  6. Validate your security policy file using the Admin CLI.
  7. Securely join the metaspace by using the TIBCO ActiveSpaces security API and passing in the security policy file. See the ASDomainController example for each supported programming language to see how the security API is used to connect to a metaspace as a security domain controller.