Configure PKI for the Data Share Manager

You can configure public key infrastructure (PKI) authentication for Data Share Manager to authenticate all uploads and downloads from Data Share Manager to FMS volumes. Authentication relies on two-way encrypted communication between the client (Data Share Manager) and the server (FMS), and requires the FMS system to be fronted by a reverse proxy configured to use two-way encrypted communications. To enable PKI authentication for Data Share Manager, open the Data-Share-Manager-installed-location\dm\dm.properties file and set the com.teamcenter.fms.servercache.ssl.enabled parameter to true. Setting only this value to true without setting the keystore and truststore properties specifies that the certificates should be read from the browser store. This is the recommended setting. (Setting the value to false disables the authentication.) Setting the com.teamcenter.fms.servercache.ssl.enabled parameter to false (or letting it default to false) may cause PKI-authenticated reverse proxy connections to fail. After PKI authentication is enabled, configure the following properties to use file-based keystore or truststore: com.teamcenter.fms.servercache.ssl.keystore=keystore.jks com.teamcenter.fms.servercache.ssl.keystorepassword=password com.teamcenter.fms.servercache.ssl.keystoretype=jks|pkcs12 com.teamcenter.fms.servercache.ssl.truststore=truststore.jks com.teamcenter.fms.servercache.ssl.truststorepassword=password com.teamcenter.fms.servercache.ssl.truststoretype=jks To allow self-signed certificates from untrusted parties, set the value of the com.teamcenter.fms.servercache.ssl.allowuntrusted parameter to true. Warning Siemens Digital Industries Software does not recommend using self-signed (untrusted) certificates. This configuration is provided only for test purposes and should only be used if you are confident in the identity of the FMS (reverse proxy) URL and the integrity of your connection.