Enabling HTTPS for Center and Data Service

1. Prerequisites

Apache Tomcat 8.5, MySQL/MSSQL, JDK 11 and ActiveMQ must be installed.
JAVA_HOME environment variables must be defined.
akaBot Center war file must be placed in correct directory.
akaBot Data Service files must be placed in below directory:
C:\akaBot\DataService\*

2. Generate and Trust Certificate

2.1. Generate Certificate

In this guideline, we are going generate self-signed certificate files. To generate certificates that are trusted globally and accepted by other machines, you need to contact the IT department to create certificates.

Before doing the next action, we need to backup java system "cacerts" file for safety reasons.

generate-certificate

Then, open command prompt with administrative privileges and run below commands.

Remember to change your domain, password and company information, if required.

domain-dataservice

After the above command is finished, the file C:\Program Files\Java\jdk-11\lib\security\cacerts will be updated with new alias name "akabot" inside. And there will be 3 files appear to your current working directory:

jdk-11

2.2. Import Existing Certificate

In case the IT department already generated a valid certificate. We can convert this certificate to another format and import it to akaBot software.

alias-dataservice

2.3. Trust Certificate

Manual (Machine Scope)

In the Center and Data Service machine, double click to file "akabot.cer" and then install this certificate to Local Machine > Trusted Root. After install certificate, you can check the result in "Manage computer certificates > Trusted Root Certification Authorities".

manual-dataservice

machine-scope-dataservice

NOTE: remember to copy file "akabot.cer" to all Agent machines and trust it also.

Automatically (Organization Scope)

In an organization, all the machines are connected to an Active Directory server. They will fetch all certificates and policies from this server to apply to local machine. We can do this way to automatically trust the above certificate to all Agent machines.

To do this, you need to send the above certificate to your IT department. They will add it to Trusted Root of their Active Directory server.