Configuring Unica Director for SSL

About this task

Perform the following steps to configure SSL for Unica Director Server and Agent:

Prerequisites:

1. The Unica Campaign and Unica Platform application should SSL enabled too.

2. In Unica Platform, navigate to "Affinium|suite|security|apiSecurity|manage" from Settings >> Configuration and enable "Secure API access over HTTPS" property for User, Policy, Configuration, Datasource and Login.

Configure SSL for Unica Director Server by performing the following steps:

Prerequisite:

Copy certificate files (.cer / .jks) used for Unica Platform to the machine where Unica Director server will be running. For example - PlatformClientIdentity.jks and PlatformClientSecurityCert.cer used to configure Unica Platform / Unica Campaign SSL environment.

1. Navigate to <HCL_Unica_DIRECTOR_SERVER_HOME>\Server and open application.properties file , change below values:

Un-comment all below :

server.ssl.key-alias=PlatformClientIdentity #this should same alias as of PlatformClientIdentity.jks

server.ssl.key-password=unica*03 #this should be same password used to create PlatformClientIdentity.jks

server.ssl.key-store=C:\\PROGRA~1\\Java\\JDK18~1.0_1

bin

PlatformClientIdentity.jks #Provide the path where you copied PlatformClientIdentity.jks

server.ssl.key-store-provider=SUN #if using Oracle JRE , provider is SUN , for IBM Jre , provider is IBMJCE

server.ssl.key-store-type=JKS

2. Import the certificate inside the JRE keystore which will be used to start Unica Director server:

keytool -import -file PlatformClientSecurityCert.cer -alias addonkey -keystore $JDK_HOME/jre/lib/security/cacerts

3. Start the Unica Director Server

$JDK_HOME/bin/java -jar add-on_Server-12.0.0.0

Configure SSL for Unica Director Agent by performing the following steps:

Pre-requisite:

Copy certificate files (.cer / .jks) used for Unica Platform to the machine where Unica Director Agent will be running. For example - PlatformClientIdentity.jks and PlatformClientSecurityCert.cer used to configure Unica Platform / Unica Campaign SSL environment.

1. Navigate to <HCL_Unica_DIRECTOR_SERVER_HOME>\Agent and open application.properties file , change below values:

Un-coment all below :

server.ssl.key-alias=PlatformClientIdentity #this should same alias as of PlatformClientIdentity.jks

server.ssl.key-password=unica*03 #this should be same password used to create PlatformClientIdentity.jks

server.ssl.key-store=C:\\PROGRA~1\\Java\\JDK18~1.0_1

bin

PlatformClientIdentity.jks #Provide the path where you copied PlatformClientIdentity.jks

server.ssl.key-store-provider=SUN #if using Oracle JRE , provider is SUN , for IBM Jre , provider is IBMJCE

server.ssl.key-store-type=JKS

2. Import the certificate inside the JRE keystore which will be used to start Unica Director server:

keytool -import -file PlatformClientSecurityCert.cer -alias addonkey -keystore $JDK_HOME/jre/lib/security/cacerts

3. Start the Unica Director Agent:

$JDK_HOME/bin/java -jar add-on_Server-12.0.0.0