Configuring McAfee Web Gateway for SSL (Optional)

This section explains the configuration setup to use McAfee Web Gateway for SSL communications.

Prerequisites

Ensure that you are logged into McAfee Web Console.

Procedure

  1. Click Configuration.
  2. Click the Proxies node in the explorer under Appliances.
  3. Add a new ICAP server port, for example 11344 for SSL.

  4. Select the ICAPS check box to enable ICAPS.
  5. Click Generate server certificate.
  6. Enter all the required information for server certificate. Click OK.
  7. Click Export.
  8. Save the exported certificate in a file with .crt extension. For example, save the exported certificate with the file name as mcafeeserver.crt.
  9. Import the public key of the certificate to keystore of TIBCO API Exchange Gateway Server.
    1. Navigate to TIBCO_HOME/tibcojre64/1.7.0/bin directory.
    2. Enter the following command: 
    keytool -import -trustcacerts -alias rootCA -file Exported_Certificate_From_ICAPS -keystore KeyStoreFileName

    For example, 

    keytool -import -trustcacerts -alias rootCA -file mcafeeserver.crt -keystore mykeystore.jks