14.5 Configuring SSL between the Proxy Service and the Web Servers

SSL must be enabled between the Access Gateway and browsers before you can enable it between the Access Gateway and its Web servers.

  1. In the Administration Console, click Devices > Access Gateways > Edit > [Name of Reverse Proxy] > [Name of Proxy Service] > Web Servers.

  2. To configure SSL, select Connect Using SSL.

    This option is not available if you have not set up SSL between browsers and the Access Gateway. See Section 14.4, Configuring SSL Communication with Browsers and the Identity Server and select the Enable SSL between Browser and Access Gateway field.

  3. (Optional) Set up mutual authentication so that the Web server can verify the proxy service certificate:

    1. Click the Select Certificate icon,

    2. Select the certificate you created for the reverse proxy, then click OK.

      This is only part of the process. You need to import the trusted root certificate of the CA that signed the proxy service’s certificate to the Web servers assigned to this proxy service. For instructions, see your Web server documentation.

  4. In the Connect Port field, specify the port that your Web server uses for SSL communication. The following table lists some common servers and their default ports.

    Server Type

    Non-Secure Port

    Secure Port

    Web server with HTML content

    80

    443

    WebSphere

    9080

    9443

    JBoss

    8080

    8443

  5. To save your changes to browser cache, click OK.

  6. To apply your changes, click the Access Gateways link, then click Update > OK.