Preparing the Customization File for Jolt SSL and WSL SSL Ports

You have the option to use the Secure Socket Layers/Transport Layer Security (SSL/TSL) protocol for Workstation Listener and Jolt Listener ports for the application server configuration. To use this protocol you must set up an Oracle wallet for the digital certificates.

See PeopleTools: Security Administration, "Installing Web Server-Based Digital Certificates."

Note:

Review the requirements in Understanding PeopleSoft Environment Customizations before preparing the customization file.

Locate the psft_configuration.yaml file in BASE_DIR/dpk/puppet/production/data.

Note:

The code examples in this topic are for illustrative purposes only. Remember to use the text from the YAML files you install with each new deployment as the basis for your psft_customizations.yaml file.
If necessary, create a psft_customizations.yaml using a standard editing tool, such as Notepad on Microsoft Windows or vi on Linux, and save it in the same location as the psft_configuration.yaml file.

If this is the first entry in the psft_customizations.yaml file, ensure that there are three dashes (---) on the first line of the file. Do not indent the dashes.
Copy the entire appserver_domain_list section from psft_configuration.yaml to psft_customizations.yaml.

When you copy, retain the indentation as given in the delivered YAML file.
Add the following parameters to the psft_customizations.yaml file:

Note:

These parameters are not included in the delivered psft_configuration.yaml file.
- Specify the SSL/TSL port for the Jolt listener; for example 9012.
```
JOLT Listener/SSL Port:                9012
```
- Specify the SSL/TSL port for the Workstation listener, for example 7012:
```
Workstation Listener/SSL Port:        7012
```
- Specify the location of the wallet containing the certificates:
```
Oracle Wallet/SEC_PRINCIPAL_LOCATION: test/security
```
- Specify the wallet name, for example psft:
```
Oracle Wallet/SEC_PRINCIPAL_NAME:     psft
```
- Specify the wallet password:
```
Oracle Wallet/SEC_PRINCIPAL_PASSWORD:
```

Modify the psft_customizations.yaml file, including the added parameters from the previous step, with values for your environment.

Note:

Be sure to retain the indentation shown in this example.

This sample psft_customizations.yaml file shows the parameters added from step 4 in bold font:

---

appserver_domain_list:
  "%{lookup('appserver_domain_name')}":
    os_user:         "%{lookup('domain_user')}"
    ps_cfg_home_dir: "%{lookup('ps_config_home')}"
    template_type:   "%{lookup('appserver_template')}"

    db_settings:
      db_name:        "%{lookup('db_name')}"
      db_type:        "%{lookup('db_platform')}"
      db_opr_id:      "%{lookup('db_user')}"
      db_opr_pwd:     "%{lookup('db_user_pwd')}"
      db_connect_id:  "%{lookup('db_connect_id')}"
      db_connect_pwd: "%{lookup('db_connect_pwd')}"

    config_settings:
      Domain Settings/Allow Dynamic Changes:    Y
      Domain Settings/Domain ID:            "%{lookup('appserver_domain_name')}"
      PSAPPSRV/Min Instances:               2
      PSAPPSRV/Max Instances:               2
      PSAPPSRV/Max Fetch Size:              15000
      Security/DomainConnectionPwd:         "%{lookup('domain_conn_pwd')}"
      JOLT Listener/Port:                   "%{lookup('jolt_port')}"
      JOLT Listener/Address:                 0.0.0.0
      JOLT Listener/SSL Port:                9012
      Workstation Listener/Port:            "%{lookup('wsl_port')}"
      Workstation Listener/SSL Port:        7012  
               Oracle Wallet/SEC_PRINCIPAL_LOCATION: test/security
               Oracle Wallet/SEC_PRINCIPAL_NAME:     psft
               Oracle Wallet/SEC_PRINCIPAL_PASSWORD: 


    feature_settings:
      PUBSUB:        "Yes"
      QUICKSRV:      "No"
      QUERYSRV:      "No"
      JOLT:          "Yes"
      JRAD:          "No"
      WSL:           "Yes"
      DBGSRV:        "No"
      RENSRV:        "No"
      MCF:           "No"
      PPM:           "Yes"
      PSPPMSRV:      "Yes"
      ANALYTICSRV:   "No"
      SERVER_EVENTS: "Yes"
      DOMAIN_GW:     "No"

Save the file.
Continue with the steps in Completing the Customized Deployment.