SSL Certificates

NOTE: SSL Certificates are available in Enterprise and Community editions of Quantum Fabric Admin Console. Customers using Quantum Fabric Admin Console in Starter edition cannot view the following features:
- Service Monitor
- Jobs
- Health Check
- Logs
- Reports
- Downloads

To configure secured communication between the server and the client, App Services provides an interface to upload the cliennt certificates and the root certificates of the backend to the middleware. The uploaded SSL certificates aids in encrypting the information sent between the client and the server.

There are two ways of uploading the certificates to the middleware:

  • One-way SSL
  • Two-way SSL

One-way SSL: A root certificate of the backend server is uploaded . When the client sends a request to the server, the middleware server(client) validates the certificate uploaded with the certificate in the trust store. If the certificate is found in the trust store, the client accepts the communication from the server.

Two-way SSL: A client SSL certificate is uploaded in the key store. When a request is received , both the parties (client and the server) validates the certificates uploaded and the response is sent to the client.

To access SSL certificates in the App Services, follow these steps:

  1. Log on to App Services. For more information on logging, refer Launching the App Services.
  2. Click Settings from the left pane of the App Services and click SSL Certificates tab to upload the SSL certificates. The SSL Certificates page appears.

The following fields are displayed in this screen:

Field Description
Certificate Alias

Name of the certificate provided while uploading.

NOTE: The field is case-insensitive and must be unique.
Type

Type of the certificate uploaded. SSL certificates are of two types:

  • One-way SSL
  • Two-way SSL
Expires On The expiry date of the uploaded certificate.
Uploaded On The uploaded date of the certificate.
Uploaded By Name of the certificate uploaded user.
Certificate Details

Details of the uploaded certificate.

Field Description
Cert Domain Domain of the uploaded certificate.
Target Domain Intended target server to which the data is sent.
Organization Certificate issuing organization.
Issuer Certificate issuing authority.
Add certificate Click Add Certificate to upload the certificate.
Delete Delete the uploaded certificates.

 

You can perform the following actions in this screen:

Add Certificate

You can add a One-way or Two-way SSL certificates by clicking on Add Certificate button. To add a certificate, click Add Certificate. An Add SSL Certificate pop-up appears with two options:

One-way SSL

You can upload One-way SSL certificates the root certificate signed by your own internal private certificate authority or any intermediate certificates. Enter the required details in the fields provided to upload a one-way SSL certificate:

Field Description
Certificate Alias

Enter an alias name to upload the certificate.

NOTE: The field is case-insensitive and must be unique.
Server SSL Certificate Select the certificate to be uploaded by clicking the Browse button.
Submit Click Submit to upload the certificate.
Cancel Cancel the operation.

 

To upload one-way SSL, perform the following actions:

  1. Click one-way SSL from Add SSL Certificate pop-up.
  2. Enter an alias name for the certificate to be uploaded.
  3. Select the certificate by clicking the Browse button.
  4. Click Submit.

Two-way SSL

The two-way SSL certificate is the client certificate uploaded in the trust store. In Add Certificate pop-up, select Two-way SSL and enter the required details in the fields provided:

Field Description
Certificate Alias

An alias name for the certificate to be uploaded.

NOTE: The field is case-insensitive and must be unique.
Client SSL certificate Browse to select the client SSL certificate.
Target Domains

Target server to send the data.

NOTE: This field is mandatory if you are using SSL Certificates in Community edition.
Private Key Private key of the certificate to be uploaded.
Private Key Password (Optional)

Password for the private key.

NOTE: This is an optional field. This field is not applicable in community edition.
Submit Submit to upload the details entered.
Cancel Cancel to abort the operation.

 

Perform the following actions to upload a two-way SSL:

  • Click Two-way SSL from Add SSL Certificate pop-up.
  • Enter the required details and click Browse to select the Two-way SSL certificate.
  • Click Submit to upload the certificate to the middleware.

Delete a Certificate

You can delete an uploaded certificate by performing the following actions:

  • Log on to App Services and click Settings from the left pane of the screen.
  • Click SSL Certificates tab from the top pane of the settings screen. The list of uploaded certificates appears.

    You can find a Delete icon displayed on the right corner across each row.

  • Click Delete to delete the certificate.

Limitation

  • Quantum supports PKCS#1 private key.