Cisco Cisco Workload Automation 6.3 Installation Guide

Configuring SSL Messaging

Configuring SSL on the Backup Master

#MessageBroker.SSL.trustStorePassword=

If such segment can't be found, manually insert these lines.

Uncomment each property starts with "#MessageBroker.SSL." by removing the leading pound sign '#' character.

The property MessageBroker.SSL.enabled determines whether to activate other SSL properties and enable SSL 
messaging.  Value 'Y' means yes, and 'N' no.  You can use this property switch between SSL and non SSL messaging 
modes.

For each of the above SSL properties, assign value applicable to your certificate.

MessageBroker.SSL.keyStore: Path to the key store

MessageBroker.SSL.keyStorePassword: Password needed to open the key store

MessageBroker.SSL.keyPassword: Password needed to read the key, if it's different from the password 

of the key store

MessageBroker.SSL.trustStore: Path to the trust store

MessageBroker.SSL.trustStorePassword: Password needed to open the trust store

Note: You must obfuscate the passwords before storing them in the property files.  Refer to 

 for instructions.

Save the property file.

If you setting up a fault tolerant system, continue on to 

.  Otherwise, 

continue on to 

Configuring SSL on the Backup Master

In this section, you will enable SSL on the Backup Master with the key stores you obtained from earlier section.

Shut down the Backup Master.

Copy the key store for the Backup Master to the 

 directory in the Master's installation directory.

Create a trust store by importing Client Manager's certificate.  Follow the instructions in 

e. Import the certificate of the Fault Monitor into this trust store too.

If you are setting up Remote Master, import the certificate of the Remote Master into this trust store too.

When done, copy the trust store to the config directory in the Master's installation directory.

Use a text editor to open the property file config/master.props located in the Master's installation directory.

Note: It may be a good idea to back up this file before editing it to ensure there is a good copy to fall back to.

In the editor, locate the segment of SSL properties that looks like the following.

#MessageBroker.SSL.enabled=Y

#MessageBroker.SSL.keyStore=

#MessageBroker.SSL.keyStorePassword=

#MessageBroker.SSL.keyPassword=

#MessageBroker.SSL.trustStore=

#MessageBroker.SSL.trustStorePassword=

If such segment can't be found, manually insert these lines.

Uncomment each property starts with "#MessageBroker.SSL." by removing the leading pound sign '#' character.