Configure Data Admin to Use SSL

By default, Data Admin runs in plain HTTP mode. You can configure it to use SSL communications.

NOTE: If you enable SSL, you cannot use plain HTTP with Data Admin.

To configure Data Admin to use SSL

  • Set the following Java system properties:

    server.ssl.key-store

    The path to a keystore. You must create a keystore and import your certificates into it. By default, Data Admin expects this keystore to be in JKS format. For more information on JKS keystore creation, see https://docs.oracle.com/cd/E19509-01/820-3503/ggfen/index.html.

    NOTE: To use a keystore in a different format, you must also set server.ssl.key-store-type to the type of keystore to use, for example pkcs12.
    server.ssl.key-store-password The password for the keystore.
    server.ssl.key-password The password for the key inside the keystore.
    server.port The port to listen on. To use SSL, you must change this value from the default port (that is, you must not use port 8080). Typically you use port 8443, but you can use any valid port value.

    For example:

    java -Dserver.ssl.key-store=/etc/ssl/private/keystore.jks -Dserver.ssl.key-store-password=MyPassword -Dserver.ssl.key-password=KeyPassword -Didol.dataadmin.home=[home directory] -Dserver.port=8443 -jar dataadmin.jar

For more information about using Java system properties, see Using Java System Properties.