CA RiskMinder Administration Guide › Configuring SSL › Enable SSL Between Administration Console and RiskMinder Server › For Rule Configurations Activities › One-Way SSL

One-Way SSL

To set up one-way SSL communication between Administration Console and RiskMinder Server for administrative activities:

1. Access Administration Console in a Web browser window.
2. Log in to Administration Console as the MA.
3. Activate the Services and Server Configurations tab.
4. Ensure that the RiskFort subtab is activated.
5. Under Instance Configuration, click the Protocol Configuration link to display the Protocol Configuration page.
6. Select the Server Instance for which you want to configure SSL communication.
7. In the List of Protocols section, click the Administration Web Service link.

   The page to configure the Administration Web Service protocol appears.

8. Configure the following fields:
   • Ensure that the Protocol Status is Enabled.

     If not, then select the Change Protocol Status option and then from the Action list, select Enable.

   • Ensure that the Port is set to the correct SSL port value.
   • Select SSL from the Transport list.
   • If you want to store the SSL key on an HSM, then select the Key in HSM option.
   • Click the Browse button adjacent to the Server Certificate Chain field to select the RiskMinder Server root certificate.
   • (Only if you did not select the Key in HSM option) Click the Browse button adjacent to the Server Private Key field to select the RiskMinder Server private key.
9. Click the Save button.
10. Restart RiskMinder Server:
    • On Windows: Click the Start button, navigate to Settings, Control Panel, Administrative Tools, and Services. Double-click Arcot RiskFort Service from the listed services.
    • On UNIX Platforms: Navigate to <install_location>/arcot/bin/ and specify the ./riskfortserver start command in the console window.
11. Under System Configuration, click the RiskFort Connectivity link to display the RiskFort Connectivity page.
12. Scroll down to the RiskFort Administration Connectivity section.
13. In the RiskFort Administration Connectivity section:
    • Ensure that the IP address or the host name of RiskMinder Server is correctly set in the Server field.
    • Ensure that the Server Management Port is also set to point the RiskMinder Server port that is open to Administration Web Service requests.
    • Select SSL from the Transport list.
    • Click the Browse button adjacent to the Server CA Root Certificate field to navigate to and select the RiskMinder root certificate.
14. Click the Save button.
15. Restart RiskMinder Server:
    • On Windows: Click the Start button, navigate to Settings, Control Panel, Administrative Tools, and Services. Double-click Arcot RiskFort Service from the listed services.
    • On UNIX Platforms: Navigate to <install_location>/arcot/bin/ and specify the ./riskfortserver start command in the console window.
16. Restart Administration Console