Table of Contents

Search

  1. About the Security Guide
  2. Introduction to Informatica Security
  3. User Authentication
  4. LDAP Security Domains
  5. Kerberos Authentication Setup
  6. Domain Security
  7. Security Management in Informatica Administrator
  8. Users and Groups
  9. Privileges and Roles
  10. Permissions
  11. Audit Reports
  12. Command Line Privileges and Permissions
  13. Custom Roles

Configuring the Informatica Client Applications to Work with a Secure Domain

Configuring the Informatica Client Applications to Work with a Secure Domain

When you enable secure communication within the domain, you also secure connections between the domain and Informatica client applications, such as the Developer tool. Specify the location and password of the truststore files used to secure the domain with environment variables.
If you use the default Informatica SSL certificate, you do not need to set the INFA_TRUSTSTORE or INFA_TRUSTSTORE_PASSWORD environment variable. When you install the Informatica clients, the installer sets the environment variables and installs the default truststore files in the following directory:
<Informatica installation directory>\clients\shared\security
If you provide the SSL certificates to use, copy the truststore files to the machine that hosts the client and set the INFA_TRUSTSTORE variable to the directory that contains the truststore files. You must have truststore files in JKS and PEM format named
infa_truststore.jks
and
infa_truststore.pem
. You must also set the INFA_TRUSTSTORE_PASSWORD variable with the password for the
infa_truststore.jks
file.
Set the following environment variables for the truststore information:
INFA_TRUSTSTORE
Set this variable to the directory that contains the truststore files for the SSL certificates. The directory must contain truststore files named
infa_truststore.jks
and
infa_truststore.pem
.
INFA_TRUSTSTORE_PASSWORD
Set this variable to the password for the
infa_truststore.jks
file. The password must be encrypted. Use the command line program
pmpasswd
to encrypt the password.


Updated April 29, 2019