Configure HTTPS in the Server

You can configure TIBCO Enterprise Message Service to provide health checks and Prometheus-formatted metrics over an HTTP(S) listen port. For more information about this feature, refer to the Server Health and Metrics.

To use HTTPS, each instance of tibemsd must have a digital certificate and a private key. The server can optionally be configured to handle trusted certificates.

Set the server to listen for HTTPS requests by using the monitor_listen parameter in tibemsd.conf. To specify that a port accepts HTTPS connections, specify the HTTPS protocol in the monitor_listen parameter as follows:

monitor_listen = https://servername:port

HTTPS Properties

There are a few HTTPS properties that can be set in tibemsd.conf. If none of them are set, the matching server TLS parameters are used their place. HTTPS Server Parameters provides a complete description of the TLS parameters that can be set in tibemsd.conf.