Skip to main content

Cryptographic certificates

Bravura Security strongly recommends that users access Bravura Security Fabric using SSL (HTTPS). To do this:

  1. Assign a fixed IP address to each Bravura Security Fabric server.

  2. Assign a single DNS host name to all Bravura Security Fabric servers.

  3. Install the web server (IIS).

  4. Create a certificate signing request (CSR) file.

  5. Submit the CSR file to a certificate authority such as Verisign.

  6. Receive and install a signed certificate.

The SSL/TLS, is all configured and managed by IIS. For detailed information for using IIS, consult Microsoft's documentation.

Once you have configured IIS the following settings should be updated so that the product communicates via the new, https URL.

  1. Click Manage the system > Workflow.

  2. Update BASE IDSYNCH URL with the FQDN of the instance server; for example, https://idm1.bravura1.corp.

  3. Click Update.

  4. Update the various end points to the HTTPS URL that you may have previous configured; for example, if you are using the API SOAP service, edit the idapisoap services endpoints. See API SOAP Service (idapisoap) .

In this section: