Distributed Index Handler 25.3
Distributed Index Handler Help

# Set Up SSL Connections

You can configure Secure Socket Layer (SSL) connections between the DIH and other servers. You can configure SSL connections in a combination of different configuration sections:

- `[Server]`. Configure SSL in this section for connections for incoming ACI calls. You can configure this section in either the unified configuration file or the DIH configuration file, depending on whether the system uses a unified or stand-alone setup.

  NOTE: In a unified Knowledge Discovery setup, you must set the SSLConfig configuration parameter in the `[Server]` section, rather than the `[DistributionSettings]` section.

- `[IDOLServerN]` or `[DIHEngineN]`. Configure SSL in this section for connections for outgoing ACI calls. You can set this option in either the unified configuration file or DIH configuration file, depending on whether the system uses a unified or stand-alone setup.

  You can also configure SSL connections between DIH and the service port of the child servers by using the ServiceSSLConfig parameter in this section.

- `[IndexServer]`. Configure SSL in this section for connections for the index port.

To configure an SSL connection

1. Open the configuration file in a text editor. If you use a unified setup, use the unified configuration file. If you use a stand-alone setup, use the DIH configuration file.
2. Find the `[Server]`, `[IDOLServerN]`, or `[DIHEngineN]` section, or create an `[IndexServer]` section.

3. Add the SSLConfig setting to specify the section in which you set the SSL details for the connection, usually `SSLOptionN`. For example:

       [Server]
       (other server settings...)
       SSLConfig=SSLOption0

       [IDOLServer0]
       SSLConfig=SSLOption0

       [IDOLServer1]
       SSLConfig=SSLOption1

   In this example, incoming ACI calls and outgoing calls to `IDOLServer0` share the same SSL configuration, and outgoing calls to `IDOLServer1` use a different configuration.

4. In the `[IDOLServerN]` section or the `[DIHEngineN]` section, add the ServiceSSLConfig setting to the name of the section in which you set the SSL details for connections to the child server service port.

5. Create an `[SSLOptionN]` section for each unique SSLConfig or ServiceSSLConfig setting. Each `SSLOption` entry must contain the SSLMethod, SSLCertificate, and SSLPrivateKey parameters. For example:

       [SSLOption0]
       SSLMethod=TLSV1.3
       SSLCertificate=host1.crt
       SSLPrivateKey=host1.key

       [SSLOption1]
       SSLMethod=TLSV1.3
       SSLCertificate=host2.crt
       SSLPrivateKey=host2.key

6. Save and close the configuration file. Restart the unified Knowledge Discovery service (for a unified setup) or the DIH (for a stand-alone setup) for your changes to take effect.

Copyright 2025 Open Text
Version 25.3 | Last updated July 2025

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: Knowledge Discovery Distributed Index Handler 25.3

Topic Title: Set Up SSL Connections