Configuring SSL for secure access

You can configure Secure Sockets Layer (SSL) access to HPE Consumption Analytics Portal.

Before you begin

To use SSL, you need a certificate issued by a certificate authority and a certificate chain. Instructions for downloading a certificate chain for your certificate vary and should be available from the certificate authority which issued your certificate.

To configure SSL

1. Open a command prompt and run the following commands.
   Linux
   # $JAVA_HOME/bin/keytool -import -alias root -keystore <your_keystore_filename> -trustcacerts -file <filename_of_the_chain_certificate>
# $JAVA_HOME/bin/keytool -import -alias tomcat -keystore <your_keystore_filename> -file <your_certificate_filename>
   Windows​
   %JAVA_HOME%\bin\keytool -import -alias root -keystore <your_keystore_filename> -trustcacerts -file <filename_of_the_chain_certificate>
%JAVA_HOME%\bin\keytool -import -alias tomcat -keystore <your_keystore_filename> -file <your_certificate_filename>

2. Open <install_dir>/conf/system.properties in a text editor and change the following properties. Remove all leading # characters to uncomment these lines.

   • Enable HTTPS.
     serverHttpsEnabled=true
   • Set the path to your keystore file and your keystore password.
     serverKeystoreFile=<path_to_your_keystore_file>
serverKeystorePassword=<your_keystore_password>
   • (optional) Disable non-SSL (regular HTTP) access.​
     serverHttpEnabled=false
3. Save the file and restart the HPE Consumption Analytics Portal application server.