Agents › DevTest Java Agent › Java Agent Security › Configure the Java Agent to Use SSL

Configure the Java Agent to Use SSL

You can use the Secure Sockets Layer (SSL) to secure communication between the agent and the broker.

The broker inherits the settings that the registry has for SSL. The agent uses the same encrypted password and the same keystore.

Choose one of the following approaches.

Default Keystore

This approach uses the default keystore in DevTest.

Follow these steps:

1. Open the local.properties file in the LISA_HOME directory and uncomment the following line:

   lisa.net.default.protocol=ssl
   

2. Save the local.properties file.
3. Start or restart the registry.
4. When specifying the broker URL, use the ssl scheme. For example:

   ssl://localhost:2009
   

Custom Keystore

This approach is based on a custom keystore.

Note: For detailed information about the DevTest Portal, see Using CA Continuous Application Insight.

Follow these steps:

1. Configure a custom keystore by following the instructions in Using SSL to Secure Communication.
2. Place the keystore in the LISA_HOME\agent directory.
3. Open the DevTest Portal.
4. Select Settings, Agents in the left navigation pane.
5. In the left portion, select the agent.
6. Click the Settings tab.
7. Set the following security properties to configure a custom keystore that mirrors the DevTest properties. You can copy the encrypted passwords from the local.properties file.
   • Keystore location
   • Keystore password (encrypted)
   • Truststore location
   • Truststore password (encrypted)
8. In the left portion, select the broker.
9. Set the same properties as for the agent. The path to the keystore will be different.
10. When you specify the broker URL, use the ssl scheme. For example:

    ssl://localhost:2009