Configuring the SSL connection protocol for the network

About this task

To configure SSL for your network, perform the following steps:
  1. Create an SSL directory under the TWA_home directory. By default, the path TWA_home\TWS\ssl is registered in the localopts file. If you create a directory with a name different from ssl in the TWA_home directory, then update the localopts file accordingly.
  2. Copy openssl.cnf and openssl.exe to the SSL directory
  3. Create as many private keys, certificates, and Trusted CA lists as you plan to use in your network.
  4. For each workstation that will use SSL authentication:
    • Update its definition in the IBM Workload Scheduler database with the SSL attributes.
    • Add the SSL local options in the localopts file.
Although you are not required to follow a particular sequence, these tasks must all be completed to activate SSL support.

In IBM Workload Scheduler, SSL support is available for the fault-tolerant agents only (including the master and the domain managers), but not for the extended agents. If you want to use SSL authentication for a workstation that runs an extended agent, you must specify this parameter in the definition of the host workstation of the extended agent.