Previous Topic: Basic CommunicationNext Topic: Generate SSL Certificate Files

Set Up a Load Balancer for Orchestrator Clustering › NGINX Load Balancer › REST Configuration › Secure Communication

Secure Communication

SSL certificate files are required for secure communication with REST. Make sure you generate these files before you begin this procedure.

Follow these steps:

  1. Navigate to the following folder 
    nginx_install_dir/conf

    This folder contains pam-rest.conf file.

  2. Open the pam-rest.conf file.
  3. Edit the following block of code: 
    ## HTTPS
upstream sslcluster  {
  server <Enter node1 hostname here>:7443 max_fails=3 fail_timeout=5s;
  server <Enter node2 hostname here>:7443 max_fails=3 fail_timeout=5s;
}

    Replace the Enter node1 hostname here placeholders with a valid value. Do not change the port numbers unless you use a different port for the CA Process Automation node.

    Repeat these steps for each additional node that you install.

  4. Update the following lines by specifying the location of c2ocert.pem and c2okey2.pem files (in the nginx_installed_location\conf directory). 
    ssl_certificate      <certificate_location\c2ocert.pem>;

    ssl_certificate_key  <certificate_location\c2okey2.pem>;

    For example:

    ssl_certificate      <nginx_install_dir\conf\c2ocert.pem>;
  5. Save and close the pam-rest.conf file.
  6. Open the nginx.conf file.
  7. Add the following entry in the http block at the end of the nginx.conf file: 
    include nginx_install_dir/conf/pam-rest.conf;

    This entry links NGINX with the configuration changes you made for CA Process Automation in the pam-rest.conf file.

  8. Save and close the nginx.conf file.

    Important! Perform the rest of these steps after you install at least one Orchestrator node. See Interactive Domain Orchestrator Installation or Unattended Domain Orchestrator Installation for instructions.

  9. Once you have installed at least one Orchestrator node, open the nginx_install_dir/conf/nginx.conf file.
  10. Save and close the nginx.conf file.
  11. Stop NGINX. In a command prompt, navigate to the NGINX directory location and enter:
  12. Restart NGINX.

    The changes take effect.