Configure TCCS for SSL

Secure sockets layer (SSL) is a framework to provide an encrypted connection between the client and the server. Following are some SSL terms and their meanings: Cacerts A file that contains certificates issued by trusted certificate authorities (CAs). Certificate A verification tool that consists of a public encryption key with identity information and an expiration date. Clients and servers trust certain certificate authorities (CAs) that issue SSL certificates. Keys An encryption key pair that consists of a private key and a corresponding public key. Data encrypted by one can only be decrypted by the other. Keystore A file used for storing private keys and certificates and their corresponding public keys. Truststore A file used for storing certificates from other parties or from trusted certificate authorities. A cacerts file is a truststore. If you have set up your enterprise to use SSL, perform the following steps to configure TCCS to use SSL in Deployment Center and Teamcenter Environment Manager (TEM). Configuring TCCS for SSL using Deployment Center Procedure Using Deployment Center, select the Teamcenter Client Communication System component in the Components tab. Navigate to the Client Communication System Configuration Settings section of the component. Under the Secure Socket Layer (SSL) Settings section, select one of the following: Use Internet Explorer Certificate Store (Recommended) Uses certificates stored in Microsoft Internet Explorer. This option is available only on Windows hosts. Disable SSL Turns off SSL. Configure Certificate Store Manually Enables you to select Use Trust Store (supported type is JKS) to use an established repository file of trusted certificates, such as Java KeyStore. Specify the location of the established repository file in the Trust Store File box. This populates the truststore element in the tccs.xml file. If a location is not specified, Java uses the standard Java Development Kit (JDK) CA keystore in the jre/lib/security/cacerts folder. If you select Configure Certificate Store Manually in the Secure Socket Layer (SSL) Settings section, you can: Select Accept untrusted certificates to allow self-signed certificates from untrusted parties. This sets the allowuntrustedcertificates element in the tccs.xml file to true. Select this option if you do not want to provide warnings for untrusted certificates. Select Use Key Store to use a keystore file that contains private keys and certificates and their corresponding public keys. Specify the location of the keystore file in the Key Store File box. This populates the truststore element in the tccs.xml file. In the Type box, select JKS or PKCS12 as the keystore file format. Save the component settings. In the Deploy tab, generate deployment scripts for affected machines in your environment. Configuring TCCS for SSL in TEM Procedure Launch TEM in maintenance mode. For this operating system Do this Windows In the Windows start menu, choose Programs>Teamcenter 2606, and then right-click Environment Manager and choose Run as administrator. You can also run the tem.bat file in the install directory in the application root directory for the Teamcenter installation. Right-click the tem.bat program icon and choose Run as administrator. Linux Change to the install directory in the Teamcenter application root directory for your Teamcenter installation, and run the tem.sh script . In the Maintenance panel, choose Configuration Manager. In the Configuration Maintenance panel, select Perform maintenance on an existing configuration. In the Old Configuration panel, select the configuration that contains the four-tier rich client. In the Feature Maintenance panel, under Client Communication System, select Use Configurations and Environments. Proceed to the Secure Socket Layer (SSL) Settings panel and select one of the following: Use Internet Explorer Certificate Store (Recommended) Uses certificates stored in Microsoft Internet Explorer. This option is available only on Windows hosts. Disable SSL Turns off SSL. Configure Certificate Store Manually Enables you to configure the certificate store you want to use. Select Use trust store (supported type is JKS) to use an established repository file of trusted certificates, such as Java KeyStore. Click the ellipse button in the File box to point to the file. This populates the truststore element in the tccs.xml file. When this is unspecified, Java uses the standard Java Development Kit (JDK) CA keystore in the jre/lib/security/cacerts folder. Select Accept untrusted certificates to allow self-signed certificates from untrusted parties. This sets the allowuntrustedcertificates element in the tccs.xml file to true. Select this option if you do not want to provide warnings for untrusted certificates. Select Use Key Store to use a keystore file that contains private keys and certificates and their corresponding public keys. Click the ellipse button in the File box to point to the keystore file. This populates the keystore element in the tccs.xml file. Click the arrow in the Type box to select JKS or PKCS12 as the keystore file format. Click Next until you arrive at the Confirmation panel and then click Start. The systems saves the SSL settings. Verify the following SSL settings in the tccs.xml file: This setting Specifies this keystore The path to a key store file containing a user’s private keys. keystorepassword The password for the key store file. truststore The path to a trust store file that contains trusted certificates. When this is unspecified, Java uses a standard JDK file cacerts. truststorepassword The password for the trust store. allowuntrustedcertificates Allows self-signed certificates from untrusted parties.