Previous Topic: Configure the Secure Private Tunnel

Next Topic: Account Import

Example startup.properties Files

The following settings must be added to the startup.properties files on the routing gateway and CMS. In the following example, the machine name of the routing gateway is XP-GW-07. This is parented to CMS-HARDY, a CMS administered by a customer.

Startup.properties file on:

Routing gateway: XP-GW-07

Server administered by customer: ‘CMS-HARDY’

[Secure Private Tunnel]

spt.serverport=56096

spt.hosts=CMS-HARDY:56097,199.0.0.1:56097

spt.keystore=GWKeyStore.jks

spt.clientCNlist=CustomerCMS

[Secure Private Tunnel]

spt.serverport=56097

spt.hosts=XP-GW-07:56096, 10.0.0.17:56096

spt.keystore=CMSKeyStore.jks

spt.clientCNlist=RoutingGW

spt.serverport=56096

Specifies the port number used by the gateway to accept tunnel connections.

spt.serverport=56097

Specifies the port number used by the CMS to accept tunnel connections.

spt.hosts=CMS-HARDY:56097,199.0.0.1:56097

Specifies the machine name and, optionally, the IP address of the target CMS plus its serverport port. If no port numbers are specified, the default is 56079.

spt.hosts=XP-GW-07:56096,10.0.0.17:56096

Specifies the machine name and, optionally, the IP address of the routing gateway plus its serverport. If no port is specified, the default is 56079. If required, you can specify multiple gateways.

Note: Normally, you only need to list the machine names. But if there is a risk that a remote machine’s IP address cannot be resolved from its name when the CA DLP infrastructure starts, we recommend you also list its IP address.

spt.keystore=GWKeyStore.jks

Specifies the name of the Java Keystore format file containing a trusted root certificate plus the certificate for the routing gateway.

spt.keystore=CMSKeyStore.jks

Specifies the name of the Java Keystore format file containing a trusted root certificate plus the certificate for the CMS.

spt.clientCNlist=CustomerCMS

Specifies a list of common names of certificates whose infrastructure is permitted to communicate with this gateway using the tunnel.

spt.clientCNlist=RoutingGW

Specifies a list of common names of certificates whose infrastructure is permitted to communicate with this CMS using the tunnel.

More information:

Certificate Management