Configuring EMS over SSL

You can configure the EMS server to start running over SSL.

Prerequisite

Ensure that tibcrypt.jar is in the CLASSPATH of the application server.

Procedure

  1. Stop the application server.
  2. Edit the following values in $EMS_HOME\tibco\cfgmgmt\ems\data\tibemsd.conf file.
    • specify the SSL protocol in the listen parameter: listen= ssl://hostname:portno
    • ssl_server_identity = TIBCO_HOME/ems/version_number/samples/certs/server.cert.pem
    • ssl_server_key = TIBCO_HOME/ems/version_number/samples/certs/server.key.pem
    • ssl_password = $man$WjtSRCpaXu7hoTkDlcEPr6KNKRr
    • ssl_server_trusted =TIBCO_HOME/ems/version_number/samples/certs/client_root.cert.pem
  3. Start EMS server using the updated tibemsd.conf file.
    TIBCO_HOME/ems/version_number/bin/tibemsd –config EMS_HOME/tibco/cfgmgmt/ems/data/tibemsd.conf
    The EMS server starts running over SSL.