Configuring SSL for PeopleSoft Domain’s JMX Agents (Logstash)

To enable SSL for the JMX agents for Logstash, you must also configure SSL for the PeopleSoft application server and Process Scheduler domains. This section is required only if you enabled SSL by setting the parameter JMXSSLEnabled=true in the previous section.

The keystore that is used at the domain level needs to be signed with the root certificate, and the same needs to be imported to the Logstash truststore certLS.jks.

For information on working with keystore and truststore files, see the information on SSL/TLS and Digital Certificates.

See PeopleTools: Security Administration.

If necessary, create a keystore.

Alternatively, use the default keystore, pskey.
Create a certificate request.
Import the signed certification into the keystore.
Import the root CA into the keystore.
Run PSADMIN in your PeopleSoft environment, and select 1) Application Server or 2) Process Scheduler.
Select 1) Administer a domain, and select the domain.
Select Configure this domain.
Select PHC Remote Admin Settings.

Enter each requested value and press ENTER to continue.

The menu includes general parameters for PeopleSoft Health Center remote administration, as well as the SSL values. The following sample includes only the SSL parameters.

Enable Remote Administration SSL=1
Remote Administration SSL Keystore=<PS_CFG_HOME>/mykeystore
Remote Administration SSL Keystore Password=encrypted password
Remote Administration SSL Keystore Type=PKCS12
Remote Administration SSL Truststore=<PS_CFG_HOME>/mykeystore
Remote Administration SSL Truststore Password=encrypted password
Remote Administration SSL Truststore Type=PKCS12