Configuring Digital Certificate Based Login on Apache Server

This topic describes the steps for configuring digital certificate based login on Apache Server.

In Process Platform, you can authenticate users with the digital certificates. Server Certificates and Client or User Certificates are required before you configure Process Platform in SSL. For assigning certificates to users in Process Platform, refer to Creating Users. You must do the following to configure Process Platform to authenticate users with digital certificates on Apache server:

1. Configure SSL on Apache server.
   
2. Configure user certificate.
   
   The steps are explained in detail below.
   
   
3. Configuring SSL for Apache on Linux OS
   
4. To configure user certificate, do the following:
   
   1. Save the user certificate in Base 64 format in <Apache Installation directory>/conf/ssl.
      
   2. Place client certificates in this certificate path specified in the following line of code in the <Process_Platform_Installation_Directory>/components/webgateway/Apache/cordys_apache.conf file: the line

      SSLCACertificatePath conf/ssl/

      The client certificate is placed in the server trust store.
      
      Process Platform is now configured to authenticate users with digital certificates in Apache.
      
      Note: Use 'https' instead of 'http' in the URL to open the Web site. Also ensure that the name is accurate, else you will get a security alert.