http://ab.edge-technologies.com/docs/index.php?action=history&feed=atom&title=Appboard%2F2.4%2Fadmin%2Fclient_certificates 2026-05-22T14:00:03Z Revision history for this page on the wiki MediaWiki 1.38.4 http://ab.edge-technologies.com/docs/index.php?title=Appboard/2.4/admin/client_certificates&diff=7644&oldid=prev 2014-09-05T13:02:56Z

<p>Created page with &#039;{{DISPLAYTITLE:Client Certificates / Client Authentication}} <a href="/docs/index.php?title=Category:AppBoard_2.4&amp;action=edit&amp;redlink=1" class="new" title="Category:AppBoard 2.4 (page does not exist)">Category:AppBoard 2.4</a> ==Overview== Most people are familiar with secure web sites, sites that begin with the addr...&#039;</p> <p><b>New page</b></p><div>{{DISPLAYTITLE:Client Certificates / Client Authentication}}<br /> [[Category:AppBoard 2.4]]<br /> ==Overview==<br /> Most people are familiar with secure web sites, sites that begin with the address &lt;tt&gt;https&lt;/tt&gt;, that use certificates signed by authorities trusted to ensure the site is who it says it is. Lesser known is the server can request the client return a certificate to authenticate the client - this is known as (SSL) &#039;&#039;Client Authentication&#039;&#039;<br /> <br /> AppBoard fully supports SSL Client Authentication and the main components to configure are:<br /> <br /> # Update Tomcat to enable client authentication<br /> # Create/Import Java Truststore used by the server to validate the client certificates.<br /> # (optionally) AppBoard may be customized to use this information beyond Tomcat validating the SSL session.<br /> <br /> == Tomcat Configuration ==<br /> <br /> # Enable client authentication by editing &lt;tt&gt;[INSTALL_HOME]/server/conf/server.xml&lt;/tt&gt; and adding the following parameters to the eportal Connector:<br /> #: &lt;tt&gt;clientAuth=&quot;true&quot;&lt;/tt&gt;<br /> #: &lt;tt&gt;truststoreFile=&quot;&#039;&#039;full_path_to_truststore_file&#039;&#039;&quot;&lt;/tt&gt;<br /> #: &lt;tt&gt;truststorePass=&quot;&#039;&#039;password_for_truststore_file&#039;&#039;&quot;&lt;/tt&gt;<br /> # Create a Java Truststore file in JKS format, alternatively PKCS11 and PKCS12 are supported by setting the &lt;tt&gt;truststoreType&lt;/tt&gt; parameter. By default the type used matches the &lt;tt&gt;keystoreType&lt;/tt&gt; parameter.<br /> <br /> {{Note|It is recommended to contact Support and engage the Edge Solutions team to help with the basic configuration and further customization that may be needed.}}</div>

imported>Jason.nicholls