Enable SSL encryption for published Web Services

If you want external Web Services clients to use an SSL connection with the Service Manager server, you must provide them with the CA certificate for the Service Manager server. If you purchased a server certificate, copy the CA certificate from the CA certificate keystore provided with your purchased certificate. If you generated your own server certificate by using a self-signed private CA certificate, copy the CA certificate from your private CA certificate keystore instead.

Note We recommend that you do not use the Service Manager sample server CA certificate because the sample certificate uses a common name (CN) for the server which will not match your actual server name. The best practice is to purchase or create a valid certificate for the Service Manager server in order to establish an SSL-encrypted connection with external web service clients.

  1. Copy the keystore that contains the CA certificate that signed your server's certificate and send it to the systems running the external Web Services clients. Out-of-box, Service Manager uses a sample CA certificates keystore as part of the Web tier.

    Note We recommend using a CA certificate that you created or purchased instead of the default Service Manager CA certificate.

  2. Import the CA certificate of the Service Manager system into the CA certificate keystore of the external Web Services client. You may use a tool like keytool to import the Service Manager CA certificate.
  3. Configure the external Web Services client to use the updated CA certificate keystore. Follow the instructions for your Web Services client to set the path to the CA certificate keystore.
  4. Update the endpoint URL that the external Web Services client uses to include the HTTPS protocol.

    For example, https://myserver.mydomain.com:13443/SM/7/ws for SOAP and https://myserver.mydomain.com:13443/SM/9/rest for RESTful.

    Follow the instructions for your Web Service client to update the endpoint URL.

    Note The endpoint URL must use the Service Manager server's common name (CN) as defined in the server certificate. For example, if the server certificate uses the name myserver.mydomain.com, then the endpoint URL must also use the name myserver.mydomain.com.

    Note If you want external Web Services clients to download the Service Manager Web Services WSDL, point them to a URL using the following format:

    https://myserver.mydomain.com:13443/SM/7/<Service Name>.wsdl