Update the SSL Connection Settings for the CLI

Edit online

About this task

Command Central comes with a default configuration properties file that contains the SSL properties with the default SSL settings. The default cc.properties file is used by the Command Central server to communicate with the CLI over HTTPS. The following table lists the properties in the file, their default values and the command option that you can specify when running a CLI command to override the value specified in the properties file:

Property Default Value Use this option to override the default setting
server https://localhost:8091/cce --server
username Administrator --user
password   --password
ssl-truststore-file demo-truststore.jks --ssl-truststore-file
ssl-truststore-password   --ssl-truststore-password
ssl-trust-all-hosts   --ssl-trust-all-hosts
Important: IBM does not recommend editing or changing the settings in the default cc.properties file, located in the IBMwebMethods_directory \CommandCentral\client\conf directory. You must create a custom cc.properties file when you want to update the SSL connection settings for the CLI.

To create a custom cc.properties configuration file

Procedure

  1. Go to IBMwebMethods_directory \CommandCentral\client\conf
  2. Copy the cc.properties files to the following location: user_home \.sag\cc.properties
    Note: To create the .sag directory in Windows, at the command prompt type mkdir %HOME%\.sag
  3. Set file permissions for your copy of the cc.properties file to prevent other users from accessing the file.
  4. Open the custom cc.properties file in a text editor to update the SSL properties. Add @secure in front of a property name to indicate that the property value should be encrypted. For example: @secure.password=manage 
       
# in the HTTPS URL of Command Central, set the port number of the HTTPS 
port that points to the custom keystore   
server=https://localhost:8091/cce
      
# the user name of the Command Central administrator user   
username=Administrator
      
# the password of the Command Central administrator user   
@secure.password=admin_password
      
# the location of the custom truststore file   
ssl-truststore-file=path/to/cli-truststore.jks
      
# the password to access the truststore file   
ssl-truststore-password=strong_password
      
# indicates that the CLI will only trust the Command Central server host   
ssl-trust-all-hosts=false
  5. Save the custom cc.properties file.
  6. Run a CLI command with --configuration-file path/to/custom.cc.properties to set the CLI to use the SSL connection settings in the custom cc.properties file.
    After the CLI command that includes the custom cc.properties file gets executed, Command Central encrypts the values of the properties prefixed with @secure.