Before you begin setting up SSL on Content Manager OnDemand for Linux

Because of possible problems with system performance, create SSL connections only for communications requiring secure transmission. Consider adding additional processor resources on the Content Manager OnDemand server, client, or both to manage the increased overhead.

GSKit provides the GSKCapiCmd tool, which helps you create and manage digital certificates and key databases. The instructions in Setting up SSL on the Content Manager OnDemand for Linux server provide examples of how to run the GSKCapCmd tool; however, to view the complete syntax and understand the behavior of this tool, see ftp://ftp.software.ibm.com/software/webserver/appserv/library/v61/ihs/GSK7c_CapiCmd_UserGuide.pdf.

Choose the scenario from the following list that fits your requirements, then follow the instructions for that scenario:

Content Manager OnDemand server listens only on a non-SSL port. You cannot set up SSL for this situation. Continue to the next Content Manager OnDemand installation task.
Content Manager OnDemand server listens only on a SSL port. You must do the following tasks:
- Set up SSL on Content Manager OnDemand for Linux server (see Setting up SSL on the Content Manager OnDemand for Linux server).
- Install GSKit on all clients.
- Configure the clients to support SSL (see Setting up SSL on the Content Manager OnDemand client).
Content Manager OnDemand server listens on both a non-SSL port and a SSL port. You must do the following steps:
- Set up SSL on Content Manager OnDemand for Linux server (see Setting up SSL on the Content Manager OnDemand for Linux server).
- Install GSKit on the clients connecting to the SSL port.
- Configure those clients to support SSL (see Setting up SSL on the Content Manager OnDemand client).