Previous Topic: Grant Read Access to the CA Data Protection Import Web ServiceNext Topic: Deploy Policy Engines


Configure the CA Data Protection Import Web Service to Use SSL

if you require secure communications between Content Collector and the CA Data Protection policy engines, you can configure the CA Data Protection web service to use SSL.

To configure the CA Data Protection web service to use SSL

  1. Open the web.config.

    Find this file in the \bin subfolder of the CA Data Protection installation folder on the IBM Content Collector host server.

  2. Locate the <service> element:
    <services>
      <service name="ICCImportSvc.WgnICCImportSvc">
        <endpoint binding="webHttpBinding" contract="ICCImportSvc.IWgnICCImportSvc"/>
      </service>
    </services>
    
  3. Add the bindingConfiguration property to the <service> element:
    <services>
      <service name="ICCImportSvc.WgnICCImportSvc">
        <endpoint 
         binding="webHttpBinding" 
         contract="ICCImportSvc.IWgnICCImportSvc" 
         bindingConfiguration="webHttps"/>
      </service>
    </services>
    
  4. Add a new <bindings> element at the same level as the <services> element:
    <bindings>
      <webHttpBinding>
        <binding name="webHttps">
          <security mode="Transport" />
        </binding>
      </webHttpBinding>
    </bindings>
    

    The updated web.config file now looks like this:

    <services>
      <service name="ICCImportSvc.WgnICCImportSvc">
        <endpoint 
         binding="webHttpBinding" 
         contract="ICCImportSvc.IWgnICCImportSvc" 
         bindingConfiguration="webHttps"/>
      </service>
    </services>
    <bindings>
      <webHttpBinding>
        <binding name="webHttps">
          <security mode="Transport" />
        </binding>
      </webHttpBinding>
    </bindings>
    
  5. Verify that SSL is configured in Microsoft IIS.

    The CA Data Protection import web service will accept requests using HTTPS.