Follow the steps below to configure TLS. For instructions on how The TLS requires that you set up a keystore to contain certificates and private keys. For more information on setting up a keystore, see Keystore Settings.
For instructions to include client authentication (two-way authentication), see Enabling Client Authentication.
Setting Up with a New Keystore File
Run the mzsh keytool generate command to create a new certificate and keystore file. The certificate generated by the command will have the alias: Platform.
Create a keystore in the Platform Container.
| Code Block | ||||
|---|---|---|---|---|
| ||||
$ mzsh keytool generate -k <keystore file> --enable-tls rcp |
...
| title | Example - Creating a keystore |
|---|
| Code Block | ||||
|---|---|---|---|---|
| ||||
$ mzsh keytool generate -k $MZ_HOME/keys/container.keys --enable-tls rcp |
...
Setting Up With an Existing Keystore File
Run the mzsh keytool command with the enable-tls option when an existing keystore already exists in the installation.
Enable the TLS protocol over HTTP.
| Code Block | ||||
|---|---|---|---|---|
| ||||
$ mzsh keytool enable-tls rcp -k <keystore file> -a <alias> |
...
| title | Example |
|---|
| Code Block | ||||
|---|---|---|---|---|
| ||||
$ mzsh keytool enable-tls rcp -k $MZ_HOME/keys/container.keys -a platform |
...
.