Using HTTPS with Single Sign-On › How to Set Up HTTPS for CA Single Sign-On

How to Set Up HTTPS for CA Single Sign-On

To enable SSL, several steps are required. First, install the certificates that validate the identity of the server. Second, change the database so that CA Performance Center properly redirects to the correct port and scheme for Single Sign-On, and the reverse. Finally, change the services for both CA Performance Center and Single Sign-On to reflect the new ports and schemes.

Two ports are important for these steps: the CA Performance Center port (which defaults to 8181) and the Single Sign-On port (which defaults to 8381). Port 8181 is the CA Performance Center connection port. If users require authentication, the server redirects them to Single Sign-On on port 8381, where they see the Login page. Once a user has successfully logged in, the server redirects that user back to the original URL at port 8181.

Therefore, you cannot use the same port in each configuration step. Otherwise, a conflict occurs between CA Performance Center and Single Sign-On.

To enable HTTPS for CA Performance Center and Single Sign-On, complete the following steps:

1. Obtain a server certificate and install it in the web server keystore.
2. Use the Single Sign-On Configuration Tool to update the necessary properties.
3. Set up HTTPS on the CA Performance Center console.
4. Set up HTTPS in Single Sign-On.
5. Stop and restart the services.