Configure secure communication

You can encrypt the communication between ARIS and the LDAP server.

To do so, you have two mutually exclusive options:

STARTTLS
This transforms a connection that was originally untrusted into an encrypted connection without using a specific port.
SSL
The connection between ARIS and the LDAP server is established using a specific port.

Prerequisite

The LDAP server has a valid SSL certificate and LDAPS is activated.
ARIS Administration trusts the LDAP server (the SSL certificate of the LDAP server or the certification authority is stored in the JRE database of trustworthy certificates).
You have the Technical configuration administrator function privilege.

STARTTLS

You can use STARTTLS to configure encrypted communication between ARIS and the LDAP server.

Procedure. Procedure

Click Application launcher > Administration. Configuration is displayed.
Click User management.
Click the arrow next to LDAP.
Click the arrow next to the relevant LDAP server.
Click Connection.
Click Edit.
Configure the URL for the LDAP system. To do so, enter the URL as in the Server URL field, for example:
```
                           ldap://hqgc.mycompany.com:3168.
```
Configure the fallback URL of the LDAP backup system in the Server URL (fallback) field. This backup system takes over automatically if the LDAP server cannot be reached via its primary URL.
Enable Use SSL.
Select STARTTLS from the SSL mode list.
ARIS must trust the LDAP server used. Therefore, we recommend that you use the LDAP server with a certificate signed by a public certification authority. If your certificate is signed by a public certification authority and stored in the list of trustworthy certificates of your JRE, you do not need to configure anything else.
Upload LDAP truststore file.
1. Click Application launcher > Administration. Configuration is displayed.
2. Click User Management.
3. Click the arrow next to LDAP.
4. Click General settings.
5. Click Truststore. You must have generated a truststore file.
6. Click Upload. The Truststore dialog opens. Select the truststore file you want to use and click Upload.
7. Select the relevant file.

Procedure. Procedure

Start ARIS.
Click Application launcher > Administration. Configuration is displayed.
Click User management.
Click the arrow next to LDAP.
Click the arrow next to the relevant LDAP server.
Click Connection.
Click Edit.
Configure the URL for the LDAP system. To do so, enter the URL as in the Server URL field, for example:
```
                           ldap://hqgc.mycompany.com:3168.
```
Configure the fallback URL of the LDAP backup system in the Server URL (fallback) field. This backup system takes over automatically if the LDAP server cannot be reached via its primary URL.
Enable Use SSL.
Select SSL from the SSL mode list.
ARIS must trust the LDAP server used. Therefore, we recommend that you use the LDAP server with a certificate signed by a public certification authority. If your certificate is signed by a public certification authority and stored in the list of trustworthy certificates of your JRE, you do not need to configure anything else.
Upload LDAP truststore file.
1. Click Application launcher > Administration. Configuration is displayed.
2. Click User Management.
3. Click the arrow next to LDAP.
4. Click General settings.
5. Click Truststore. You must have generated a truststore file.
6. Click Upload. The Truststore dialog opens. Select the truststore file you want to use and click Upload.
7. Select the relevant file.