Follow the steps below to enable One-way SSL server authentication for RCP. To include client authentication (two-way SSL mutual authentication), continue the steps in /wiki/spaces/MD94/pages/352186038.

Setting Up with a New Keystore File

Run the mzsh keytool generate command to create a new keystore file contains a new self-signed certificate. The certificate generated by the command will have the alias: Platform.

1. Enable TLS on RCP with a new keystore.

   $ mzsh keytool generate -k <keystore file> --enable-tls rcp

   Example, this command will create a new keystore file (contain self-signed certificate) in $MZ_HOME/keys and enable TLS on RCP.

   $ mzsh keytool generate -k $MZ_HOME/keys/container.keys --enable-tls rcp

2. Restart the Platform.

Setting Up With an Existing Keystore File

If you have a keystore file, place it in the installation. Run the mzsh keytool command with the enable-tls option and the full path to the keystore file.

1. Enable TLS on RCP with existing keystore.

   $ mzsh keytool enable-tls rcp -k <keystore file> -a <alias>

   Example,

   $ mzsh keytool enable-tls rcp -k $MZ_HOME/keys/keystore.p12 -a platform

2. Restart the Platform.