Configure IDOL Data Admin to Use SSL

By default, IDOL Data Admin runs in plain HTTP mode. You can configure it to use SSL communications, by setting the appropriate system properties in the Java run command.

NOTE: If you enable SSL, you cannot use plain HTTP with IDOL Data Admin.

To configure IDOL Data Admin to use SSL

  • Start IDOL Data Admin with the Java run command, and include the following arguments:

    -Dserver.ssl.key-store=path_to_keystore
    -Dserver.ssl.key-store-password=keystore_password
    -Dserver.ssl.key-password=key_password
    -Dserver.port=server_port

    where,

    path_to_keystore

    is the path to a keystore. You must create a keystore and import your certificates into it. By default, IDOL Data Admin expects this keystore to be in JKS format. For more information on JKS keystore creation, see https://docs.oracle.com/cd/E19509-01/820-3503/ggfen/index.html.

    NOTE: If you want to use a keystore in a different format, you must also set the -Dserver.ssl.key-store-type argument to the type of keystore that you want to use. For example:

    -Dserver.ssl.key-store-type=pkcs12
    keystore_password is the password for the keystore.
    key_password is the password for the key inside the keystore.
    server_port is the port to use for IDOL Data Admin. To use SSL, you must change this value from the default port (that is, you must not use port 8080). Typically you use port 8443, but you can use any valid port value.

    For example:

    java -Dserver.ssl.key-store=/etc/ssl/private/keystore.jks -Dserver.ssl.key-store-password=MyPassword -Dserver.ssl.key-password=KeyPassword -Didol.dataadmin.home=[home directory] -Dserver.port=8443 -jar dataadmin.jar -uriEncoding utf-8

If you run IDOL Data Admin as a service on Windows, you can also add the same arguments to the dataadmin.xml file.

If you run IDOL Data Admin as a service on Linux, you can add the argument to the existing arguments variable in dataadmin.sh for SysV, dataadmin.conf for Upstart, or dataadmin.service for systemd.

When you modify the IDOL Data Admin configuration by modifying the XML file or start scripts, you must restart IDOL Data Admin to apply your configuration changes.

On Upstart, you must also run initctl reload-configuration before you restart, to apply the init file changes. You can then run service dataadmin restart to restart the service.

For more information on installing and running IDOL Data Admin as a service on Windows or Linux, see Install IDOL Data Admin.