Open topic with navigation

TIBCO ActiveSpaces® - Enterprise Edition 5.0.0

# Setting up a Secure Data Grid

Before you begin Ensure that a secure TIBCO FTL server is running.

Procedure
1. To configure a secure data grid in one command, create a `.tibdg` configuration file that can be passed to the tibdg administration tool.
2. In the `.tibdg` file, when defining the data grid, set `encrypted_connections=all` as shown in the following code snippet:

       grid create copyset_size=2 encrypted_connections=all grid1

   This property forces all internal grid communication and all client-to-proxy communication to use TIBCO FTL secure TCP transports.
3. Configure the firewall to open ports for client-to-proxy communication.
   For each proxy that is listening for client connections, configure `proxy_client_listen_port` to the preferred port to which the proxy must bind and listen. Example:

       proxy create proxy_client_listen_port=7771 p_01

   You can use other optional configuration options in the proxy that help configure the specific host interface. For example, you can use the `proxy_client_listen_subnet_mask` configuration option to configure network interfaces. You can specify this option at the data grid and proxy level to control the network interface to which the proxy binds when listening for connections from clients. For details, see "Configure Network Interfaces" in TIBCO ActiveSpaces® - Enterprise Edition Administration.
4. Run the tibdg tool by providing the following command-line options:
   - A completed `.tibdg` configuration file
   - A trust file
   The following command is an example of running the tibdg tool:

       >tibdg -r https://host1:8085 -s /home/youruser/as/init/grid1/grid1.tibdg --trust-file /home/youruser/as/grid1/ftl-trust.pem

   Warning: If you do not provide the trust file as a command-line option, the command fails when communicating with a secure TIBCO FTL server.

What to do next

After the data grid has been successfully configured in the TIBCO FTL server, you can start the tibdgkeeper, tibdgproxy, and tibdgnode processes. Ensure that you provide the appropriate trust file on the command-line as follows with the `--trust-file` option.

    tibdgkeeper -r "https://host1:8085|https://host2:8185|https://host3:8285" --trust-file /home/youruser/as/grid1/ftl-trust.pem -g grid1 -n k_1

Did you find this helpful?

Yes No
Great!
Thanks for taking the time to give us some feedback.
Sorry about that

Why wasn't this helpful? (check all that apply)

Could not find what I was looking for
Instructions confusing or unclear
Instructions did not work

Want to tell us more?

Please select at least one option or provide details about the issue!!

Error occurred while submitting feedback.

Error2 occurred while submitting feedback.

TIBCO ActiveSpaces® - Enterprise Edition

Copyright © 2009-2025. Cloud Software Group, Inc. All Rights Reserved.