Security Settings

1Integrate stores all data store configuration in the repository, including sensitive parameters, such as database passwords. Sensitive information is encrypted, with two options available:

• Advanced Encryption Standard (AES)

  This is the standard method of encryption in 1Integrate and will be used as default.

• AES with a custom key

  This method requires additional configuration. For more see Configuring AES with a custom Key below.

  Note: AES with a custom key is the most secure method of encryption in 1Integrate. Be aware that sensitive information (e.g. passwords) created on a custom key installation will be invalidated if the key is removed or changed. Sensitive information will also only be compatible with other 1Integrate installations configured with the same key.

Configuring AES with a Custom Key

AES with custom key can be configured both at the point of installation or after.

Note: It is recommended you carry out the implementation of a custom key at the point of installation to avoid invalidating already stored passwords.

WildFly

WebLogic

1. Move your chosen keystore into the WildFly SETTINGS directory.

2. Uncomment and set the required TLS settings in the settings.properties file:

   #tls.keystore.filename=

   #tls.keystore.password=

   #tls.keystore.type=

   #tls.key.alias=

   #tls.key.password=

   #http.enabled=

   #https.enabled=

   #soap.service.scheme=

   #jboss.bind.address=

   TLS details

   Parameter	Value
   tls.keystore.filename	The name of the keystore file (including the extension) you have placed in your SETTINGS directory.
   tls.keystore.password	The password for the keystore you have placed in your SETTINGS directory
   tls.keystore.type	Your keystore type: PKCS12 or JKS
   tls.key.alias	The unique identifier for the key you will be using.
   tls.key.password	The password for the key you will use in the Keystore
   http.enabled	Set to false to disable the unsecure HTTP listener
   https.enabled	Set to true to enable the HTTPS listener
   soap.service.scheme	The protocol for the SOAP service to listen (http or https). If enabling TLS this must be set the HTTPS.
   jboss.bind.address	The address that 1Integrate should listen on, this should match the common name protected by your certificate.

3. Next time 1Integrate starts, it will only listen on port 8443 over HTTPS. To change the secure port, uncomment and set the HTTPS port:

   #interface.https.port=8443

1. Open the settings.properties file

2. Uncomment cookie.secure=true

To disable full stack trace reports to users, you will need to enable the hide.stacktrace=true property in the settings.properties file.

To disable full stack trace reports to users, within the WebLogic Server Administration Console, include the following in the Server Start Arguments for the interface: