To secure a network endpoint you will require the following, as a minimum:
- A TLS certificate.
- A TLS key with a passphrase.
To ensure a Directory Server network endpoint is TLS secured with custom certificates, use
ESCWA to perform the following steps:
- In the top menu bar, click
Native.
- In the
Native Navigation pane, expand
Directory Server.
- Click the directory server you require, then click
.
This takes you to the
Connection Properties page.
- Check
Enable TLS.
- Check
Use Custom Certificates
- In the
Certificate File field, type the location of the TLS certificate on the machine where this process runs.
- In the
Keyfile field, type the location of the TLS key on the machine where this process runs.
- In the
Keyfile Password field, type the TLS key passphrase.
- Click
Apply.
- Restart the Directory Server process.
See
Securing Communications between ESCWA and MF Directory Server using TLS and
Securing Communications Process to MF Directory Server using TLS for more information.