Encryption

Enable encryption to ensure that data is secure when passed between IBM® Business Automation Workflow, the IBM WebSphere® Application Server that is used with InfoSphere® MDM, and the REST service.

The application toolkit supports the SSL protocol. To support encryption, there are a few settings you must update and you must specify a secure port number.

You must import the appropriate public certificate into the IBM WebSphere Application Server that is running either the Process Center or the Process Server where the process is deployed.

You should not need to modify the configuration of the IBM WebSphere Application Server that is used with InfoSphere MDM, unless you do not want to use the built-in certificates.

The following table briefly describes the encryption that you can implement. Use the links below the table for the specific steps required to perform the encryption.

Table 1. Encryption configuration
Configuration	Encrypted flow endpoints	Actions required
MDM_Connection business object	Controls whether the encrypted flows between the IBM Process Center or the process server where your process is running to MDM.	Set the `usessl` parameter in the MDM_Connection business object to `true` and specify the secure port number for the IBM WebSphere Application Server.
Get MDM Entity integration service		Set the `usessl` input variable in the Get MDM Entity integration service to `true` and specify the secure port number for the IBM WebSphere Application Server.
REST service	The `usessl` attribute controls the flows between the REST Service and the operational server.	In the BPMConfig.xml file, add the `usessl=true` attribute to the `<server>` element in the MDM Tree adapter that you are using. You must also specify the secure port number for the IBM WebSphere Application Server.

You must import the appropriate public certificate from the operational server into the IBM WebSphere Application Server that is hosting your process environment. This environment can be the process center that is used to develop processes, or the process server that is used to run developed processes in a production environment.