To configure the Proxy-Authenticates-Client scenario

Steps

1. Follow the directions for configuring the secure Client-to-Proxy and secure Proxy-to-Content Server scenario in “Setting up a Reverse Proxy” in Chapter 14, Using a Reverse Proxy.

2. Access the Server Manager for a server instance and click the Preferences tab.

3. Click the Edit Listen Sockets link, and then click the link for the desired listen socket in the table that displays.

   (Use the Add Listen Socket link to configure and add listen sockets.)

4. Specify client authentication requirements:

   1. To permit access to all users with valid certificates:

      In the Security section, use the Client Authentication setting to require client authentication on this listen socket. Note that if a server certificate has not been installed, this setting will not be visible.

   2. To permit access to only those users who have both valid certificates and are specified as acceptable users in access control:

      1. In the Security section, leave the Client Authentication setting set to off. Note that if a server certificate has not been installed, this setting will not be visible.

      2. On the Server Manager Preferences tab for this server instance, click the Administer Access Control link.

      3. Select an ACL, and then click the Edit button. The Access Control Rules For page displays (authenticate first, if prompted).

      4. Turn access control on (select the Access control Is On checkbox if not already selected).

      5. Set your Proxy Server to authenticate as a reverse proxy. For more information, see Setting up a Reverse Proxy.

      6. Click the Rights link for the desired access control rule, specify access rights in the lower frame, and then click Update to update this entry.

      7. Click the Users/Groups link. In the lower frame, specify users and groups, select SSL as the authentication method, and then click Update to update this entry.

      8. Click Submit in the upper frame to save your entries.

         For more information about setting access control, see Chapter 8, Controlling Access to Your Server.