Open topic with navigation

# Set Up SSL Connections

You can configure Secure Socket Layer (SSL) connections between the DIH and other servers. You can configure SSL connections in a combination of different configuration sections:

- `[Server]`. Configure SSL in this section for connections for incoming ACI calls. You can configure this section in either the IDOL configuration file or the DIH configuration file, depending on whether the system uses a unified or stand-alone setup.

  NOTE:

  In a unified IDOL setup, you must set the `SSLConfig` configuration parameter in the `[Server]` section, rather than the `[DistributionSettings]` section.

- `[IDOLServerN]` or `[DIHEngineN]`. Configure SSL in this section for connections for outgoing ACI calls. You can set this option in either the IDOL configuration file or DIH configuration file, depending on whether the system uses a unified or stand-alone setup.

  You can also configure SSL connections between DIH and the service port of the child servers by using the `ServiceSSLConfig` parameter in this section.

- `[IndexServer]`. Configure SSL in this section for connections for the index port.

To configure an SSL connection

1. Open the configuration file in a text editor. If you use a unified setup, use the IDOL Server configuration file. If you use a stand-alone setup, use the DIH configuration file.
2. Find the `[Server]`, `[IDOLServerN]`, or `[DIHEngineN]` section, or create an `[IndexServer]` section.

3. Add the `SSLConfig` setting to specify the section in which you set the SSL details for the connection, usually `SSLOptionN`. For example:

       [Server]
       (other server settings...)
       SSLConfig=SSLOption0

       [IDOLServer0]
       SSLConfig=SSLOption0

       [IDOLServer1]
       SSLConfig=SSLOption1

   In this example, incoming ACI calls and outgoing calls to `IDOLServer0` share the same SSL configuration, and outgoing calls to `IDOLServer1` use a different configuration.

4. In the `[IDOLServerN]` section or the `[DIHEngineN]` section, add the `ServiceSSLConfig` setting to the name of the section in which you set the SSL details for connections to the child server service port.

5. Create an `[SSLOptionN]` section for each unique `SSLConfig` or `ServiceSSLConfig` setting. Each `SSLOption` entry must contain the `SSLMethod`, `SSLCertificate`, and `SSLPrivateKey` parameters. For example:

       [SSLOption0]
       SSLMethod=TLSV1.2
       SSLCertificate=host1.crt
       SSLPrivateKey=host1.key

       [SSLOption1]
       SSLMethod=TLSV1.2
       SSLCertificate=host2.crt
       SSLPrivateKey=host2.key

6. Save and close the configuration file. Restart IDOL Server (for a unified setup) or the DIH (for a stand-alone setup) for your changes to take effect.

© 2017 Hewlett Packard Enterprise Development LP | Send documentation feedback to HPE Close Send documentation feedback To open the configured email client on this computer, open an email window. Otherwise, copy the information below to a web mail client, and send this email to AutonomyTPFeedback@hpe.com. We appreciate your feedback! Product: Topic Title: Help Topic: Feedback:

_HP_HTML5_bannerTitle.htm