SSL client authentication

In case you plan to use a IBM® Security Verify Directory Integrator component as a client and a server the SSL mandates to use a keystore and truststore both. Refer to the information provided here to learn more about it.

If an IBM® Security Verify Directory Integrator component is used as a client and the server with which it communicates requires SSL client authentication, then apart from a truststore, IBM® Security Verify Directory Integrator needs a keystore as well. In this case the keystore can be defined just like it is defined when IBM® Security Verify Directory Integrator is used a server – see the section Server SSL configuration of IBM® Security Verify Directory Integrator components.

Note: Client

IBM® Security Verify Directory Integrator components which support SSL client authentication do not normally need a "SSL client authentication" check box as do IBM® Security Verify Directory Integrator server components. All such a client IBM® Security Verify Directory Integrator component needs in order to prove its identity to the server is to have its keystore generated and configured in

global.properties or

solution.properties. If the server requires an SSL client certificate then the client SSL library automatically sends the client’s certificate from the keystore configured in

global.properties or

solution.properties.