Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Configuration Management System (CMS)2018.05

Use > Hardening > Enabling Secure Sockets Layer (SSL) Communication > Enable SSL on the Client SDK

Enable SSL on the Client SDK

To enable SSL on the client SDK, you can utilize HTTPS transportation between the client SDK and the server SDK:

On the client machine, in the product that embeds the client SDK, locate the transportation setting and make sure it is configured to HTTPS, and not HTTP.
Download the CA certificate/self-signed public certificate to the client machine, and import it into the cacerts truststore on the JRE that is going to connect to the server.

Use the following command:
```
Keytool -import -alias <CA name> -trustcacerts -file <server public certificate path> -keystore <path to client jre trusted cacerts store (e.g. x:\program files\java\jre\lib\security\cacerts)>
```

To enable certificate validation on the client, start the JVM with the following system property setting to true:

"-DenableServerCertValidation=true"

Note Enabling certificate validation also enables changing which SSL protocol is used (by default TLS v1.2 is used).

TLSv1.0 and TLSv1.1 are not supported.

To enable hostname validation, first enable certificate validation:

Replace the server self-signed certificate with one that contains FQDN hostname in the common name field.
Add the certificate without the private key to all clients' JRE trust stores (for all hosts and JVM versions used).
Start the clients with the following global property setting:
```
"-DenableServerCertHostValidation=true"
```

To change SSL protocol, first enable certificate validation and then add the property:

"-DsslProtocol=TLSv1.2"

To debug SSL connectivity issues, add the following parameter to system properties:

"-Djavax.net.debug=ssl"