9.Set whether to require client authentication to the Admin Server. Client authentication means that the server checks that the client's certificate has been issued by a trusted CA.
10.Click Save.2.8.4 Creating a password file for the Admin Server
Normally, if SSL is enabled, the server prompts for a security password when the Admin Server is restarted:
Starting
Please enter password for "internal" token:
The Admin Server can use a password file when TLS/SSL is enabled so that the server restarts silently, without prompting for the security password.
WARNING!
This password is stored in clear text within the password file, so its use represents a significant security risk. Do not use a password file if the server is running in an unsecured environment.
1.Open the Admin Server configuration directory.
2.Create a password file named password.conf. The file should include a line with the token name and password, in the form token:password. For example:
internal:secret
For the NSS software crypto module (the default software database), the token is always called internal.
The password file should be owned by the Admin Server user and set to
2.8 Working with SSL | 29 |