Encrypt HTTPS Communication with Browser
This procedure applies to both the Command Center and Enterprise Command Center, with
some minor differences. Please replace occurrences of <Keystore
path>, <Keystore filename> and <Tomcat
config> with the respective entries listed below.
| Component | Command Center | Enterprise Command Center |
|---|---|---|
| Keystore path | /opt/sdconsole/ssl/ | /opt/ecc/ssl/ |
| Keystore filename | sd_keystore_web.pkcs12 | keystore.pkcs12 |
| Tomcat config | /opt/sdconsole/tomcat/conf/server.xml | /opt/ecc/tomcat/conf/server.xml |
The Java keystore (pkcs12 format) stores the following items:
- The Root Certification Authority certificate
- The Intermediate Certificate Authority certificate (if applicable)
- Certificate of the Command Center appliance
- The private key of the Command Center certificate
The Tomcat configuration file specifies the location to the Java keystore to be used:
<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" clientAuth="false" keystoreFile="<Keystore path>/<Keystore filename>"
These instructions assume the following items are available:
- Certificate for Command Center
- Private key for the Command Center certificate
- Certificate of the Certification Authority (CA) which signed the Command Center certificate
- If the Command Center certificate has been signed by an Intermediate CA, the full chain of trust is required, e.g., both the signing Intermediate CA and the Root CA certificates
- Access to the console of the Command Center appliance
- Custom Certificates, including CA certificates and Private Key files, are already transferred to the Command Center host
| Placeholder | Definition |
|---|---|
| signing_ca_cert.crt | Filename of the certificate of the CA which signed the Command Center certificate |
| root_ca_cert.crt | Filename of the certificate of the Root CA (if the Command Center certificate was signed by an Intermediate CA) |
| command center fqdn/san name | The fully qualified domain name as used in DNS and URLs (Subject Name or Subject Alternative Name is part of the certificate) |
| cc_cert.pem | Filename of the certificate for Command Center |
| cc_key.pem | Filename of the private key for the Command Center certificate |