IBM Support

ACE 11 - How to configure the Web User Interface to accept connections using TLS 1.3

How To


Summary

How to enable the Web User Interface to accept connections using TLS 1.3?

Steps

You can enable the TLS 1.3 by setting properties in the RestAdminListener section of the node.conf.yaml or server.conf.yaml configuration file for the relevant integration node or server.
Example:
RestAdminListener:
.
.
  # Server TLS configuration
  minimumTlsVersion: 'TLSv1.3' # Set the minimum TLS version that will be accepted from clients. Default is 'TLSv1.0', must be one of 'TLSv1.0', 'TLSv1.1', 'TLSv1.2' or 'TLSv1.3'.
  maximumTlsVersion: 'TLSv1.3' # Set the maximum TLS version that will be accepted from clients. Default is 'TLSv1.2', must be one of 'TLSv1.2' or 'TLSv1.3'. This must be at least the value set for minimumTlsVersion otherwise all connections will be rejected.

Additional Information

NOTE:  For the Web User Interface, TLSv1.3 is supported in ACE 11.0.0.12 (and later fix packs) and that this is due to the Node.js upgrade (v14.16.0).

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSDR5J","label":"IBM App Connect Enterprise"},"ARM Category":[{"code":"a8m0z000000cviLAAQ","label":"ACE->Toolkit and UI"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"11.0.0"}]

Document Information

Modified date:
02 September 2021

UID

ibm16486021