How to Enable Client Certificate Authentication between CPI & SOLACE - End to End

[rohini_potham3]

How to Enable Client Certificate Authentication between CPI & SOLACE:

Steps:

1. Create a Key Pair certificate on CPI Monitor -> Keystore(solace) with giving specific desired CN name. Please note that this CN name must be later used on SOLACE for additional steps.

2. Download the root certificate created in step#1 & provide it to the SOLACE admins.

3. In case of trial solace account, we would have admin access.

Navigate to Cluster Manager-> Create a service

Service -> Manage -> Certificate Authorities

Click on Add client certificate authority & copy paste the root certificate content on the dialogue box in solace & save it

4. Navigate to Broker Manager in solace & create a username under Access control with same name as CN name in step1

5. Enable the client certificate authentication in Access control under the settings tab

6. Create a queue & topic under the queue tab on broker manager

7. Create an IFLOW on CPI with receiver as AEM adapter. Provide the hostname, message VPN, username & authentication as client certificate authentication with alias name as “solace” created on step#1

8. Activate & deploy the IFLOW. The message will be pushed to Queue/topic created using the client certificate authentication

Regards,

Rohini Potham