Symphony’s SSL functionality can be configured to suit specific security requirements.
In this section, we implement typical security settings, which enable server authentication and use a common SSL configuration for all servers and clients.
Open the ego.conf file on the management host using a text editor. The location of the file is defined in the EGO_CONFDIR environment variable.
For typical security requirements, do not define EGO_KD_TS_PARAMS and ESC_TS_PARAMS. In this case, VEMKD and the Service Controller will use the SSL parameters defined in EGO_DEFAULT_TS_PARAMS.
Assign an SSL port number to the EGO_KD_TS_PORT parameter.
Open the ego.conf file on the client host using a text editor.
For EGO_CLIENT_TS_PARAMS, enable server authentication.