Table of Contents

Search

  1. Preface
  2. Data Replication Overview
  3. Understanding Data Replication
  4. Sources - Preparation and Replication Considerations
  5. Targets - Preparation and Replication Considerations
  6. Starting the Server Manager
  7. Getting Started with the Data Replication Console
  8. Defining and Managing Server Manager Main Servers and Subservers
  9. Creating and Managing User Accounts
  10. Creating and Managing Connections
  11. Creating Replication Configurations
  12. Materializing Targets with InitialSync
  13. Scheduling and Running Replication Tasks
  14. Implementing Advanced Replication Topologies
  15. Monitoring Data Replication
  16. Managing Replication Configurations
  17. Handling Replication Environment Changes and Failures
  18. Troubleshooting
  19. Data Replication Files and Subdirectories
  20. Data Replication Runtime Parameters
  21. Command Line Parameters for Data Replication Components
  22. Updating Configurations in the Replication Configuration CLI
  23. DDL Statements for Manually Creating Recovery Tables
  24. Sample Scripts for Enabling or Disabling SQL Server Change Data Capture
  25. Glossary

Configuring the Server Manager for HTTPS Communication

Configuring the Server Manager for HTTPS Communication

To provide for secure communication over a network, Data Replication supports HTTPS connections with one-way authentication for Server Manager instances. You can use HTTPS connections for all or some Server Manager instances.
For testing purposes, configure the Server Manager to use both HTTP and HTTPS connections simultaneously. For more information, see Editing Properties for the Main Server or a Subserver.
  1. Acquire a certificate signed by a certificate authority (CA) or use a self-signed certificate in PEM format to prepare the Server Manager instances to accept HTTPS connections.
    To generate a self-signed certificate, use the OpenSSL utility. Save the generated certificate under the name cert.pem in the
    DataReplication_installation
    directory on the system where you run the Server Manager instance.
    For secure communication, generate a cert.pem file for each Server Manager instance.
    For example, the following OpenSSL command generates a self-signed certificate in PEM format:
    openssl req -x509 -days 365 -nodes -newkey rsa:1024 -keyout cert.pem -out cert.pem
    When the OpenSSL utility prompts you to enter the common name for the certificate, enter the IP address or host name that you use to connect to the Server Manager instance from the Data Replication Console.
  2. Enable HTTPS communication for the Server Manager by using one of the following methods:
    • In the Data Replication Console, on the
      Server Manager
      tab >
      Configs
      view, connect to the Main server as the idradmin user. On the
      Server Manager
      tab >
      Servers
      view, right-click the server row and click
      Properties
      . In the
      Properties
      dialog box, click the
      Advanced Settings
      tab and set the
      HTTP
      property to 1. Then restart the Server Manager.
    • If you run the Server Manager in the foreground, restart it with the https command line parameter set to 1. Optionally, also include the https_port command line parameter to specify the port for HTTPS connections. For example:
      server_manager.exe https=1 https_port=8090
      Valid values are integers from 1 through 65535. By default, the Server Manager uses port 8089 for HTTPS connections.
      On Windows, if you run the Server Manager as a service, stop and remove the service and then install the Server Manager service again with the https and https_port parameters. Then restart the service. For example:
      server_manager.exe RUN_AS_SERVICE -i https=1 server_manager.exe RUN_AS_SERVICE -s
      On Linux and UNIX, if you run the Server Manager as a daemon, restart the daemon with the https and https_port parameters. For example:
      ./server_manager.sh https=1
    Regardless of which method you use, if you restart the Server Manager later, you do not have to enable HTTPS communication again.
To connect to the Server Manager for which you enabled HTTPS communication in the Data Replication Console, select the
Use TLS
option.

0 COMMENTS

We’d like to hear from you!