TDM Server Security
TDM communication with the Informatica domain depends on the configuration of the domain. If the domain is configured to run in TLS mode, the communication with the domain is secure. You can configure TLS and SSL to ensure secure a connection for the Test Data Manager web application.
You configure TLS and SSL when you create the Test Data Manager Service. If you disable TLS and SSL when you create the service, you can configure TLS and SSL by editing the service properties. You must also create a keystore file. The keystore file stores security certificates for SSL encryption. Specify the security certificate that you want to use for SSL when you create the keystore file, and set a password for the keystore file.
Creating a Keystore File for SSL
Before you can enable SSL, you must export the SSL certificate that you want to use. Use the keytool utility bundled with Java to create a keystore file.
1. Open a command prompt in Windows or a terminal in Linux or UNIX.
2. Run the following command:
keytool -import -file company_certificate.cer -keystore client.ks
3. The utility prompts you to enter a keystore password.
The command creates a keystore file called client.ks.
4. Save the keystore file to a directory. You must provide the location of the keystore file when you create or edit the Test Data Manager Service properties.
Configuring TLS and SSL
Enable TLS and SSL for the Test Data Manager web application. Enable TLS and SSL when you create the Test Data Manager Service or edit the Test Data Manager Service properties.
1. Log in to the Informatica Administrator.
2. Select the Test Data Manager Service and click Edit the Test Data Manager Server Configuration tab.
3. Select the Enable Transport layer Security (TLS) check box and enter the following properties.
- - HTTPS Port. Port number for the HTTPS connection. The default is 6643.
- - Keystore File. The path for the keystore file with relation to the TDM installation directory.
- - Keystore Password. The keystore password.
- - SSL Protocol. Secure Sockets Layer protocol to use. Default is TLS.
Configuring SSL for the Command Line Interface
Edit the userConfig.ilm file to enable SSL and TLS for the command line interface.
1. Open the following file in a text editor:
<TDM Installation Directory>\utilities\ilmcli\conf\userConfig.ilm
2. Set the following property to true:
isHTTPS=true
3. Save the userConfig.ilm file.
4. Restart the TDM Server.