Before you begin setting up SSL on Content Manager OnDemand

Because of possible problems with system performance, create SSL connections only for communications that require secure transmission. Consider adding additional processor resources on the Content Manager OnDemand server, client, or both to manage the increased processor usage.

IBM® Global Security Kit (GSKit) provides the GSKCapiCmd tool, which helps you create and manage digital certificates and key databases. The instructions in Setting up SSL on a Content Manager OnDemand AIX server provide examples of how to run the GSKCapiCmd tool; however, to view the complete syntax and understand the behavior of this tool, see GSKCapiCmd Users Guide.

Choose the scenario from the following list that fits your requirements, then follow the instructions for that scenario:
  • Content Manager OnDemand server listens only on a non-SSL port. You cannot set up SSL for this situation. Continue to the next Content Manager OnDemand installation task.
  • Content Manager OnDemand server listens only on an SSL port. You must do the following tasks:
    • Set up SSL on Content Manager OnDemand.
    • Install GSKit on all clients.
    • Configure the clients to support SSL.
  • Content Manager OnDemand server listens on both a non-SSL port and an SSL port. You must do the following steps:
    • Set up SSL on Content Manager OnDemand.
    • Install GSKit on the clients that connect to the SSL port.
    • Configure those clients to support SSL.