Configuring ASE to ABS encrypted communication
Steps
-
To enable SSL communication between ASE and ABS so that the access logs are encrypted and sent to ABS, set the value of
enable_ssltotrue.The
abs_ca_cert_pathis the location of ABS AI engine’s trusted CA certificate.If the field is left empty, ASE does not verify ABS AI engine’s certificate, but the communication is still encrypted.
-
Check and open ABS ports.
The default port for connection with ABS is
8080.-
To determine ABS accessibility, run the
check_ports.shscript on the ASE machine.Example:
/opt/pingidentity/ase/util ./check_ports.sh {ABS IPv4:[port]} -
Input ABS host IP address and ports as arguments.
-