Configure HTTPS in the Server

You can configure TIBCO Enterprise Message Service to provide health checks and Prometheus-formatted metrics over an HTTP(S) listen port. For more information about this feature, refer to the Server Health and Metrics.

To use HTTPS, each instance of tibemsd must have a digital certificate and a private key. The server can optionally be configured to handle trusted certificates.

Set the server to listen for HTTPS requests by using the monitor_listen parameter in tibemsd.conf. To specify that a port accepts HTTPS connections, specify the HTTPS protocol in the monitor_listen parameter as follows:

monitor_listen = https://servername:port

HTTPS Properties

There are a few HTTPS properties that can be set in tibemsd.conf. None are strictly required for the HTTPS listen to work as any unset parameter results in the matching server TLS parameter to be used in its place. For example, if monitor_ssl_identity is unset, the configured ssl_server_identity is used in its place. HTTPS Server Parameters provides a complete description of the TLS parameters that can be set in tibemsd.conf.