이전 항목: 사용 중인 포트에 통신 채널 재바인딩다음 항목: SSL 속성 규칙


SSL 구성

SSL에 대한 Enterprise Manager 구성은 IntroscopeEnterpriseManager.properties에서 보안 통신 채널이 사용되도록 설정하여 수행됩니다. 기본 비보안 채널 외에도 이 구성을 수행할 수 있습니다.

다음 예제에서는 보안 통신 채널과 비보안 통신 채널이 모두 사용되도록 설정합니다. 기본 비보안 수신기는 포트 5001에서 설정되고 보안 수신기는 포트 5443에서 설정됩니다.

# The enabled communication channels.
introscope.enterprisemanager.enabled.channels=channel1, channel2

# The default communication channel.
introscope.enterprisemanager.serversocketfactory.channel1=com.wily.isengard.postofficehub.link.net.server.DefaultServerSocketFactory
introscope.enterprisemanager.port.channel1=5001

# The secure communication channel.
introscope.enterprisemanager.serversocketfactory.channel2=com.wily.isengard.postofficehub.link.net.server.SSLServerSocketFactory
introscope.enterprisemanager.port.channel2=5443
# Location of a keystore containing certificates for authenticating the Enterprise Manager to clients.
# Either an absolute path or a path relative to the config directory.
# On Windows, backslashes must be escaped.  예:
# introscope.enterprisemanager.keystore.channel1=C:\\Introscope\\config\\internal\\server\\keystore
introscope.enterprisemanager.keystore.channel2=internal/server/keystore
# The password for the keystore.
# Set this property to true to enable encryption of introscope.enterprisemanager.keypassword.channel2
# Once introscope.enterprisemanager.keypassword.channel2 is encrypted,
# this property is automatically set to false.
# 
# To change the existing password, enter the new password and set this property to true.
# Note: If this property is set to true and the password is not changed, the existing encrypted password will be encrypted again.
# If password field for a new channel is configured, add the corresponding
# plaintextpassword field and set it to true to enable encryption. 
introscope.enterprisemanager.keypassword.channel2.plaintextpassword=true
introscope.enterprisemanager.keypassword.channel2=password
# Location of a truststore containing trusted client certificates.
# Either an absolute path or a path relative to the config directory.
# On Windows, backslashes must be escaped.  예:
# introscope.enterprisemanager.truststore.channel1=C:\\Introscope\\config\\internal\\server\\keystore
# A truststore is only needed if client authentication is required.
# Set this property to true to enable encryption of introscope.enterprisemanager.trustpassword.channel2
# Once introscope.enterprisemanager.trustpassword.channel2 is encrypted,
# this property is automatically set to false.
# 
# To change the existing password, enter the new password and set this property to true.
# Note: If this property is set to true and the password is not changed, the existing encrypted password will be encrypted again.
# If password field for a new channel is configured, add the corresponding  
# plaintextpassword field and set it to true to enable encryption. 
# introscope.enterprisemanager.trustpassword.channel2.plaintextpassword=false
# The password for the truststore
#introscope.enterprisemanager.trustpassword.channel2=password
# If no truststore is specified, the Enterprise Manager trusts all client certificates.