Configure Site Admin to Use SSL

By default, Site Admin runs in plain HTTP mode. You can configure it to use SSL communications.

NOTE: If you enable SSL, you cannot use plain HTTP with Site Admin.

To configure Site Admin to use SSL

  • Set the following Java system properties.

    server.ssl.key-store

    The path to a keystore. You must create a keystore and import your certificates into it. By default, Site Admin expects this keystore to be in JKS format. For more information on JKS keystore creation, see https://docs.oracle.com/cd/E19509-01/820-3503/ggfen/index.html.

    NOTE: To use a keystore in a different format, set the Java system property server.ssl.key-store-type to the type of keystore that you want to use. For example:

    -Dserver.ssl.key-store-type=pkcs12
    server.ssl.key-store-password The password for the keystore.
    server.ssl.key-password The password for the key inside the keystore.
    server.port The port to listen on. To use SSL, you must change this value from the default port (that is, you must not use port 8080). Typically you use port 8443, but you can use any valid port value.

    For example:

    java -Dserver.ssl.key-store=/etc/ssl/private/keystore.jks -Dserver.ssl.key-store-password=MyPassword -Dserver.ssl.key-password=KeyPassword -Didol.idolsiteadmin.home=[home directory] -Dserver.port=8443 -jar siteadmin.jar

For more information about using Java system properties, see Using Java System Properties.