Informatica Managed File Transfer Installation Guide

10.5.0
- 10.5.4
- 10.5.3
- 10.4.0
- 10.2.3
- 10.2.2 HotFix 1
- 10.2.2
- 10.2.1
- 10.2

Back Next

Enable Transport Layer Security version 1.3

Transfer Layer Security (TLS) version 1.3 provides several improvements over the earlier versions such as, simpler and faster TLS handshake, more secure cipher suites, and so on. Perform the following steps to enable TLSv1.3 on the

Managed File Transfer

server:

Download the latest available ZULU JDK version 1.8 and deploy it on the machine where the

Managed File Transfer

server was deployed.

Replace the value of JAVA_HOME variable value with the JDK home path where the latest java was deployed (in

setenv.sh/setenv.bat

<MFT_HOME>/server/tomcat/bin

). For example,

JAVA_HOME="/root/jdk_1.8_u302/zulu8.56.0.21-ca-jdk8.0.302-linux_x64"

Remove the comments to update the

JAVA_OPTS

variable value in

setenv.sh/setenv.bat

present in

<MFT_HOME>/server/tomcat/bin

Uncomment the following line:

#rem uncomment below lines to use OpenJSSE instead of SunJSSE for TLSv1.3
 JAVA_OPTS="-XX:+UseOpenJSSE"

Modify the

server.xml

file present in

<MFT_HOME>/server/tomcat/conf

location:

Update sslEnabledProtocols value to TLSv1.3 in the Connector tag section for secure port.

Ensure that the keystoreType value is "PKCS12".

Update the keystoreProvider value from "SUNJSSE" to "OpenJSSE".

For example:

<Connector name="secured" port="8002" protocol="HTTP/1.1"
                   SSLEnabled="true" enableLookups="false" disableUploadTimeout="true"
                   scheme="https" secure="true" clientAuth="false" sslProtocol="TLS"
                                   sslEnabledProtocols="TLSv1.3"
                   algorithm="SunX509"
                   keystoreFile="/root/DXMFT_1050/MFT/server/userdata/keys/x509/sample-keystore.p12"
                   keystorePass="default" keystoreType="PKCS12" keyAlias="sample-key"
                                   keystoreProvider="OpenJSSE"
                   truststoreFile="/root/DXMFT_1050/MFT/server/userdata/keys/x509/trustedCertificates.jks"
                   truststorePass="default" truststoreType="JKS"
                   truststoreProvider="SUN"/>

To start the HTTPS service with TLSv1.3, update the

https.xml

file present in

<MFT_HOME>/config

location, with the following values:

Update sslEnabledProtocols value to TLSv1.3.

Update the keystoreProvider value from "SUNJSSE" to "OpenJSSE".

Download Guide

Watch

Comments

Communities

Knowledge Base