Securing communication between Process Federation Server and a remote Elasticsearch cluster

In a production environment with multiple process federation servers, if you use Process Federation Server with a remote Elasticsearch cluster, secure communications between Process Federation Server and the cluster by using SSL.

1. For SSL, import the Elasticsearch server certificate to the Process Federation Server truststore by using the standard IBM® WebSphere® Application Server Liberty procedure.

   For more information, see Adding trusted certificates in Liberty.

2. Use the endpoints property of the ibmPfs_remoteElasticsearch element in the server.xml configuration file to specify the target URLs for the Elasticsearch cluster nodes.
3. Optional: If access to the Elasticsearch cluster is secured through Basic authentication, pass the credentials through the username and password attributes of the ibmPfs_remoteElasticsearch element.