Integration Guide › Integrating with CA SiteMinder › How to Integrate with CA SiteMinder › Configure the Apache Web Server with SSL Enabled on the Enterprise Management Server

Configure the Apache Web Server with SSL Enabled on the Enterprise Management Server

The steps below explain how you install the Enterprise Management Server on a Windows (2003, 2008, or 2012) Server.

First, use the wizard to install Apache HTTP Server 2.2.22.

Follow these steps:

1. To Configure Apache Web Server with SSL, run the "httpd-2.2.22-win32-x86-openssl-0.9.8t.msi" installer of apache2.x with openssl.
2. Complete the Apache HTTP Server 2.2 installation wizard as instructed. The following installation inputs are not self-explanatory:
   • Server Information - Use all default values.
   • Select Type - Select Typical.

   Note: To resolve a port conflict error, provide a unique port number in the next step.

Next, configure the Apache web server proxy plug-in:

Follow these steps:

1. Stop the JBoss application server on the Enterprise Management Server.
2. Navigate to the following directory:

   APACHE_HOME/conf
   

   APACHE_HOME

   The directory where the Apache web server is installed.

3. To enable the proxy modules and include the proxy configuration, edit the httpd.conf file:
   1. Uncomment the following lines:

      LoadModule proxy_module modules/mod_proxy.so
      LoadModule proxy_http_module modules/mod_proxy_http.so
      ServerName 
      

   2. Add the following line at the end of the Global configuration section:

      Include conf/extra/httpd-proxy-entm.conf
      

4. Navigate to the following directory:

   APACHE_HOME/conf/extra
   

5. Create a file named httpd-proxy-entm.conf, and add the following content, then save and close the file:

   # Proxy to CA AC ENTM
   <IfModule proxy_module>
     <IfModule proxy_http_module>
   	# /iam section BEGIN
       <Proxy /iam>
         Order allow,deny
         Allow from all
       </Proxy>
       ProxyPass /iam http://acentmnode.example.com:8080/iam
       ProxyPassReverse /iam http://acentmnode.example.com:8080/iam
       ProxyPass /iam/ http://acentm.examplenode.com:8080/iam/
       ProxyPassReverse /iam/ http://acentmnode.example.com:8080/iam/	
   	# /iam section END
   	# /castylesr5.1.1 section BEGIN
       <Proxy /castylesr5.1.1>
         Order allow,deny
         Allow from all
       </Proxy>
       ProxyPass /castylesr5.1.1 http://acentmnode.example.com:8080/castylesr5.1.1
       ProxyPassReverse /castylesr5.1.1 http://acentmnode.example.com:8080/castylesr5.1.1
       ProxyPass /castylesr5.1.1/ http://acentmnode.example.com:8080/castylesr5.1.1/
       ProxyPassReverse /castylesr5.1.1/ http://acentmnode.example.com:8080/castylesr5.1.1/
   	# /castylesr5.1.1 section END
     </IfModule>
   </IfModule>
   

   Note: Replace the acentmnode.example.com:port with the actual hostname and port of the server where you installed the Enterprise Management server.

6. Restart the Apache web server.
7. Start the JBoss application server.
8. To verify that the Apache web server forwards the requests successfully, browse to the Enterprise Management Server. Use the following URL:

   http://enterprise_host:port/iam/ac
   

You have configured the Apache web server proxy plug-in with SSL enabled on the Enterprise Management Server.