Start of changeIBM Content Navigator, Version 2.0.3         

Planning for Secure Sockets Layer (SSL)

Secure Sockets Layer (SSL) provides encrypted transmission to ensure that data remains confidential. You can configure IBM® Content Navigator and the components of your content management system to support SSL communication.

IBM Content Navigator supports only a single SSL URL through which all traffic is directed. IBM Content Navigator does not support SSL redirect.

To configure SSL in your environment, you must configure SSL for each component in your system. The components for which you must configure SSL depend on the types of repositories that you are connecting to.

Table 1. SSL connections for IBM Content Navigator system components
Configure SSL For Configured by Using Notes®
The IBM Content Navigator server Use your web application server administration tools to configure SSL on the IBM Content Navigator server and the HTTP server, if you have one in your environment. Refer to your web application server documentation for information about configuring SSL.
The IBM Content Navigator web application communications with your content management system components (WebSphere® Application Server only) In the IBM Content Navigator Configuration and Deployment Tool, select Use SSL certificates for the server communication on the Connect to WebSphere Application Server task.

If SSL security for Configuring Common Secure Interoperability Version 2 (CSIV2) configured on the other components of your content management system, for example on the Content Engine server or the IBM Content Manager resource manager, you must select Use SSL certificates for the server communication to be able to use the web client.

The IBM Content Navigator Configuration and Deployment Tool communication with the web application server (Oracle WebLogic Server only) In the IBM Content Navigator Configuration and Deployment Tool, select SSL enabled on the Connect to Oracle WebLogic Server task. On Oracle WebLogic Server, when SSL is enabled on the IBM Content Navigator web application server, you can enable SSL to encrypt the communication between theIBM Content Navigator Configuration and Deployment Tool and the web application server.
Accessing IBM Content Navigator through a secure connection from client machines Use SSL to secure communications between the client machine and the server. See your web application server documentation for configuring SSL communications.
IBM Content Manager Use your web application server administration tools to configure SSL on the IBM Content Manager server.  
IBM Content Manager OnDemand You can configure SSL for each IBM Content Manager OnDemand repository from the IBM Content Navigator administration tool. The SSL configuration options are on the General tab for each IBM Content Manager OnDemand repository. IBM Content Manager OnDemand requires specific configuration settings to support SSL. See the following topics in the IBM Content Manager OnDemand information center for information about configuring SSL: .
IBM FileNet® P8 components Configure SSL on the following IBM FileNet P8 components:
  • Content Engine
  • Process Engine, if you plan to use IBM Content Navigator to access IBM FileNet P8 workflows
See the following topics in the IBM FileNet P8 information center for information about configuring SSL:
End of change