Open topic with navigation

TIBCO® Enterprise Administrator 2.4.2

# SSL Configuration on the TIBCO Enterprise Administrator: An Overview

The TIBCO Enterprise Administrator supports both one-way (server side) and two-way (server side as well as client side) SSL authentication. You can configure SSL between the web browser and the TIBCO Enterprise Administrator as well as between the TIBCO Enterprise Administrator and the agent.

- One-way Authentication - This authentication is also known as server-side authentication. For this type of authentication, the HttpClient residing in an application authenticates the HttpServer residing in another application. The HttpServer is not required to authenticate the HttpClient. On TIBCO Enterprise Administrator, the following factors would be true:
  - The HttpClient residing on the TIBCO Enterprise Administrator server verifies the HttpServer residing on the agent.

    AND

  - The HttpClient residing on the agent verifies the HttpServer residing on the TIBCO Enterprise Administrator server.

So, the HttpServers residing on both the TIBCO Enterprise Administrator server and agent simply trust each others' HttpClients.

- Two-way Authentication - In addition to the server-side authentication used for the one-way authentication, the two-way authentication requires client-side authentication too. On TIBCO Enterprise Administrator, the following factors would be true:
  - The HttpClient residing on the TIBCO Enterprise Administrator server verifies the HttpServer residing on the agent.
  - The HttpClient residing on the agent verifies the HttpServer residing on the TIBCO Enterprise Administrator server.
  - The HttpServer residing on the TIBCO Enterprise Administrator server verifies the HttpClient residing on the agent.
  - The HttpServer residing on the agent verifies the HttpClient residing on the TIBCO Enterprise Administrator server.

Note: Earlier versions of TIBCO Enterprise Administrator supported only one-way authentication. TIBCO Enterprise Administrator 1.3.0 and above supports two-way authentication. However, you always have the option to implement one-way authentication alone too.

In TIBCO Enterprise Administrator, the web browser (which you use to run the TIBCO Enterprise Administrator web UI) is a client to the TIBCO Enterprise Administrator server. The TIBCO Enterprise Administrator server on the other hand, acts as a client to the agent when it makes a request to the agent, but acts as a server to the agent when the agent requests some information from it. Similarly, the agent acts as a server to the TIBCO Enterprise Administrator server when fulfilling a request from the TIBCO Enterprise Administrator server but acts as a client to the TIBCO Enterprise Administrator server when making a request to the TIBCO Enterprise Administrator server (such as when getting itself registered with the TIBCO Enterprise Administrator server).

The following diagram shows a very high-level overview of authentication in a two-way authentication setup:

Two-way Authentication

Subtopics

Did you find this helpful?

Yes No
Great!
Thanks for taking the time to give us some feedback.
Sorry about that

Why wasn't this helpful? (check all that apply)

Could not find what I was looking for
Instructions confusing or unclear
Instructions did not work

Want to tell us more?

Please select at least one option or provide details about the issue!!

Error occurred while submitting feedback.

Error2 occurred while submitting feedback.

TIBCO® Enterprise Administrator

Copyright © 1996-2025. Cloud Software Group, Inc. All Rights Reserved.