Use SSL for PI interface

[Former Member]

Hello Guys,

We have already scenario running in productive environment, SOAP AXIS -->-- PI -->-- RFC

Currently we are using HTTP URL to connect to XML feed of Metal Bulletin interface (see below communication channel configuration)

However, Metal Bulletin also offers HTTPS connection. Is it possible for us to switch to HTTPS  ?

Can you assist or provide some relevant documents ? Thanks!

Regards,

Abid!

[vicky20691 · Accepted solution]

Hi Abid,

yes it is possible if your adapter engine has SSL enabled. So the first step is the below links-

Once Adapter engine is SSL enabled with HTTPs - you need to go on correct patch level

1675953 - SSL Client Authentication failed with... | SCN

Then keystore configs

Axis SOAP Adapter + Certificate | SCN

SSL configuration in SOAP-AXIS adapter.. | SCN

Regards,

Vikas

[Former Member · Accepted solution]

Hello Vikas,

Thanks for the useful information.. we're using PI 7.31.

Can you pls provide some more detail, How to start or step by step procedure in order to implement the scenario ?.

Regards,

Abid

[engswee]

Hi Abid

For the HTTPS connection, does it require only server authentication? Or does it need client authentication as well?

If only server authentication is required, you can just use https:// in the URL instead of http://

If you face any SSL verification issue, then it might be because the server's CA cert is not installed in your PI TrustedCA key store. You can refer to the following blog on how to troubleshoot such issue and to get the correct server CA cert.

If the HTTPS connection require client authentication as well, you will need to install the client cert in NWA and configure it in the channel by selecting Authentication = Certificate, and selecting the installed cert. Again, if you face any issue, you can refer to the second part of the blog series regarding client authentication on how to troubleshoot the issue.

Regards

Eng Swee