The following settings must be added to the startup.properties files on the routing gateway and CMS. In the following example, the machine name of the routing gateway is XP-GW-07. This is parented to CMS-HARDY, a CMS administered by a customer.
|
Startup.properties file on: |
|
|
Routing gateway: XP-GW-07 |
Server administered by customer: ‘CMS-HARDY’ |
|
[Secure Private Tunnel] spt.serverport=56096 spt.hosts=CMS-HARDY:56097,199.0.0.1:56097 spt.keystore=GWKeyStore.jks spt.clientCNlist=CustomerCMS |
[Secure Private Tunnel] spt.serverport=56097 spt.hosts=XP-GW-07:56096, 10.0.0.17:56096 spt.keystore=CMSKeyStore.jks spt.clientCNlist=RoutingGW |
|
spt.serverport=56096 Specifies the port number used by the gateway to accept tunnel connections. |
spt.serverport=56097 Specifies the port number used by the CMS to accept tunnel connections. |
|
spt.hosts=CMS-HARDY:56097,199.0.0.1:56097 Specifies the machine name and, optionally, the IP address of the target CMS plus its serverport port. If no port numbers are specified, the default is 56079. |
spt.hosts=XP-GW-07:56096,10.0.0.17:56096 Specifies the machine name and, optionally, the IP address of the routing gateway plus its serverport. If no port is specified, the default is 56079. If required, you can specify multiple gateways. |
|
Note: Normally, you only need to list the machine names. But if there is a risk that a remote machine’s IP address cannot be resolved from its name when the CA DLP infrastructure starts, we recommend you also list its IP address. |
|
|
spt.keystore=GWKeyStore.jks Specifies the name of the Java Keystore format file containing a trusted root certificate plus the certificate for the routing gateway. |
spt.keystore=CMSKeyStore.jks Specifies the name of the Java Keystore format file containing a trusted root certificate plus the certificate for the CMS. |
|
spt.clientCNlist=CustomerCMS Specifies a list of common names of certificates whose infrastructure is permitted to communicate with this gateway using the tunnel. |
spt.clientCNlist=RoutingGW Specifies a list of common names of certificates whose infrastructure is permitted to communicate with this CMS using the tunnel. |
| Copyright © 2011 CA. All rights reserved. | Email CA Technologies about this topic |