7.2 Enabling HTTPS on Linux devices

To enable HTTPS on Linux devices, perform the following:

  1. Generate a self-signed certificate:

    1. Open the SSH Secure Shell and execute the keytool command.

    2. Specify the password for keystore.

    3. Specify the hostname name in the Fully Qualified Domain Name (FQDN) and organization details.

      After executing the keytool command, the keytool generates a public key and private key pair and stores it in the keystore file located at jre/lib/security/cacerts.

      The certificates need to be signed by a Certificate Authority to add into the trusted store.

  2. Enable SSL for Service Desk:

    1. To enable SSL connection, enable HTTPS in the server.xml file located at /usr/local/ServiceDesk/Server/conf#.

    2. Add the Keystore password in the server.xml file.

    3. Save and restart the server.

  3. Test the HTTPS URL.

    The application should be able to run on HTTPS using the https://localhost:8443 or https://<IP address>:8443 URL.

  4. Enable only HTTPS:

    1. Stop the LiveTime services.

    2. Open the Web.xml file located at usr/local/ServiceDesk/Server/conf and add the following content before the </web-app> markup:

      <security-constraint>
<web-resource-collection>
<web-resource-name>Protected Context</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<!--auth-constraint goes here if you require authentication-->
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>

  5. Restart the services.