Last modified Jan, 24, 2017
SSL

You can modify the SSL Settings for a cluster or enable/ disable the SSL settings for a particular cluster.

Configure SSL

  1. On the ScaleArc dashboard, locate the Status column and click Cluster Settings. 

     
     
  2. Click on the SSL tab in the Cluster Settings dashboard. Use this screen to edit/delete client and server certifications you uploaded when you created a cluster.



  3. Enable or disable SSL settings for a particular cluster.

    Any modification to the SSL Offload option requires a cluster restart.

  4. Configure the remaining fields in the screen as follows:

    Field Description User input
    SSL Authentication Offload

    Establishes secure connection between the client and the server via ScaleArc.  

    Important

    As a prerequisite, if a SQL client needs to initiate full encryption with ScaleArc's SSL-enabled cluster, ScaleArc's inbound IP should be reverse resolvable to the hostname entry in certificate uploaded on the ScaleArc cluster.

    SSL Offload enablement requires you to upload a certificate and a key pair.  

    Select OFF or ON button.
    ScaleArc as Server SSL Offload enablement requires you to upload a certificate and a key pair.
    1. Click Edit>Browse to upload Server certificate.
    2. Click Browse to upload Server key.
    Validate client Enables ScaleArc to validate clients connecting to ScaleArc, based on the issuer. Enable this option to upload and save the appropriate CA certificate.
    Validity
    Issued on
    Expires on 
    Issue and expiration dates for the certificate. Upload the certificate to see the dates.
    Force Data Encryption Forces all connections to be fully encrypted. Select/deselect checkbox.
    ScaleArc as Client ScaleArc connect to the SQL Server using client certificates.  
    Validate Server Enables ScaleArc to validate DB server communication and upload the appropriate CA certificate. Enable this option to upload and save the appropriate CA certificate.
    Validity
    Issued on
    Expires on 
    Issue and expiration dates for the certificate. Upload the certificate to see the dates.

 

 



On this page

 

 

 

 

Comments

    Add new comment