Administer > System security > Secure Sockets Layer (SSL) encryption and server certificates > Secure Sockets Layer (SSL) configuration options

Secure Sockets Layer (SSL) configuration options

Service Manager supports several different Secure Sockets Layer (SSL) configurations that you can use to protect communications between the server and clients. The following is a list of the most common SSL configurations in order of increasing security and setup required:

Configuration Type SSL encryption? Server credentials authenticated? Client credentials authenticated? Client can bypass login screen? Additional certificates required
Required SSL encryption Required
Set from server
Yes No No • Certificate authority certificate
• Server certificate
Required SSL encryption and client authentication Required
Set from server
Yes Yes No • Certificate authority certificate
• Server certificate
• Web tier certificate
• Windows client certificates
Required SSL encryption and trusted clients Required
Set from server
Yes Yes No • Certificate authority certificate
• Server certificate
• Web tier certificate
• Windows client certificates

Related topics

Example: Enabling required SSL encryption
Example: Enabling required SSL encryption and client authentication
Example: Enabling required SSL encryption and trusted clients
Example: Enabling trusted sign-on
Example: Generating a client certificate with OpenSSL
Example: Generating a server certificate with OpenSSL
Example: Viewing the contents of a cacerts file
Trusted sign-on
What are PEM files?
What is a cacerts file?

Related topics

Requirements for required SSL encryption
Requirements for required SSL encryption and client authentication
Requirements for required SSL encryption and trusted clients
Requirements for trusted sign-on

Related topics

Add a client certificate to the web tier
Add a client certificate to the Windows client
Update the cacerts keystore file
Use keytool to create a certificate request
Use keytool to create a private key