Access Service Manager on a web client through an F5 HWLB in SSL Offloading mode

This section describes how to access Service Manager on a web client through an F5 HWLB in SSL Offloading mode.

Prerequisites

Before you begin this process, you must create the client certificates and private keys, as described in Configure an HWLB for SSL offloading.

Note You do not need to configure SSL on the Service Manager server.

Modify the web.xml file

To access Service Manager on a web client through an F5 HWLB in SSL Offloading mode, configure the following parameters in the web.xml file, and then restart Tomcat:

  • ssl

    <init-param>
    <param-name>ssl</param-name>
    <param-value>true</param-value>
    </init-param>
  • externalLB

    <init-param>
    <param-name>externalLB</param-name>
    <param-value>true</param-value>
    </init-param>
  • keystore

    <!-- If this is a relative path, it will be relative to the web application's deploy directory,
    but still needs a leading slash -->
    <init-param>
    <param-name>keystore</param-name>
    <param-value>/WEB-INF/<FQDN of This Host>.keystore </param-value>
    </init-param>
    <!-- Specify the password for the client's private keystore -->
    <init-param>
    <param-name>keystorePassword</param-name>
    <param-value>clientkeystore</param-value>
    </init-param>