SSL Communications

On this page:

When passwords are passed between the browser and the AppDynamics for Databases server, you may want to enable SSL communications to protect those passwords. Use this procedure to enable SSL communications.

Enable SSL Communications

Stop the UI service via the ./stop.sh script (if on Linux) or via the DBTuna GUI windows service (if on Windows
Generate and apply the keystore with the following procedure.
1. Navigate to <AppD4DB_install_directory>/jdk/bin and run the following command and proceed with the prompted steps.
```
keytool -genkey -alias tomcat -keyalg RSA -keystore appd4db.keystore
```
2. Copy the generated keyfile to the apache-tomcat/webapps directory.
Edit the <AppD4DB_install_directory>/apache-tomcat/conf/server.xml file as follows:
1. Locate the string "SSL HTTP/1.1 Connector on port 8443" in the file.
2. Uncomment <connector > or change it with the following tag, where
  
  keystoreFile is the location of the keystore file generated in the following section
  keystorePass=<password which will generate as part of keystore gen
```
==============
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="200" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS"
keystoreFile="webapps/appd4db.keystore" keystorePass="password"/>
==============
```
  For example,
  
  Note: The default port is 8443 but you can change it to another unused port number if you like, such as 8181.
To re-direct HTTP traffic to HTTS traffic an additional security constraint is required in web.xml. Within the Read-Only Access web-resource, an additional user-data-constraint should be added the following:
<user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
Restart the UI service via the ./start.sh script (if on Linux) or via the “DBTuna GUI” windows service.
You can now access the AppDynamics for Databases UI and confirm that it is enabled via HTTPS.