Secure Sockets Layer (SSL) configuration options
HPE Service Manager supports several different Secure Sockets Layer (SSL) configurations that you can use to protect communications between the server and clients. The following is a list of the most common SSL configurations in order of increasing security and setup required:
| Configuration Type | SSL encryption? | Server credentials authenticated? | Client credentials authenticated? | Client can bypass login screen? | Additional certificates required |
|---|---|---|---|---|---|
| Required SSL encryption | Required Set from server |
Yes | No | No | • Certificate authority certificate • Server certificate |
| Required SSL encryption and client authentication | Required Set from server |
Yes | Yes | No | • Certificate authority certificate • Server certificate • Web tier certificate • Windows client certificates |
| Required SSL encryption and trusted clients | Required Set from server |
Yes | Yes | No | • Certificate authority certificate • Server certificate • Web tier certificate • Windows client certificates |
Click here to show or hide links to related topics.
Related concepts
Example: Enabling required SSL encryption
Example: Enabling required SSL encryption and client authentication
Example: Enabling required SSL encryption and trusted clients
Example: Enabling trusted sign-on
Example: Generating a client certificate with OpenSSL
Example: Generating a server certificate with OpenSSL
Example: Viewing the contents of a cacerts file
Trusted sign-on
What are PEM files?
What is a cacerts file?
Related references
Requirements for required SSL encryption
Requirements for required SSL encryption and client authentication
Requirements for required SSL encryption and trusted clients
Requirements for trusted sign-on
Related tasks
Add a client certificate to the web tier
Add a client certificate to the Windows client
Update the cacerts keystore file
Use keytool to create a certificate request
Use keytool to create a private key