5.5.5 Setting Up Mutual SSL Authentication

SSL provides the following security services from the client to the server:

  • Authentication and non-repudiation of the server, using digital signatures

  • Data confidentiality through the use of encryption

  • Data integrity through the use of authentication codes

Mutual SSL provides the same services from the server to the client as SSL. It provides authentication and non-repudiation of the client, using digital signatures.

  1. Set up Access Manager certificates for security, and import them into Access Manager. See Creating Certificates.

  2. Create an X.509 authentication class. See Mutual SSL (X.509) Authentication.

  3. Create an authentication method using this class. See Configuring Authentication Methods.

  4. Create an authentication contract using the X.509 method. See Configuring Authentication Contracts.

  5. Update Identity Server cluster configuration. See Updating Identity Server Configuration.

  6. Update any associated Access Gateways to read the new authentication contract.

  7. Assign the contract to protect resources. See Configuring Protected Resources.

  8. Update Access Gateway.