How to enable SSL for Agile Proxy server

Following the last post about Agile PLM - Web Proxy Server Installation, in this post I'll show how to enable SSL for Agile Proxy server to make Web access to Agile more secure. Apply the SSL certificate Have a signed SSL certificate file (.pfx file) from a Well-known Certificate Authorities (such as VeriSign) Login to the Agile Proxy server with administrator user Navigate to: Start -> Administrative Tools -> Internet information services (IIS) Manager Right click on Agile PLM Web Site -> properties -> Select the Directory Security tab Click on Server Certificate -> next Select Import a certificate from a .pfx file -> next Enter Path and file name of the certificate file (.pfx file) -> next Enter the password for the certificate -> next Update the iFS_External File Manager Open the Agile Java Client Select 'Admin' Tab -> expand 'Server Settings' -> open 'Locations' Select the 'File Manager' tab -> Double click on the iFS_External file manager. Update the File Manager URL from http://... to -> https://... Now you can login to Agile through the Agile Proxy server via https://servername.domain/Agile/PLMServlet. When you'll try to work with files (get file or add new) you might encounter the following error: "The preferred file server : https://servername.domain/Filemgr/AttachmentServlet for user : UserName is down. Please contact the system administrator." You'll although see the following error within OC4J~home~defaulet~island~1 (at [OASHome]/opmn/logs): 08/09/23 10:23:11 javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found 08/09/23 10:23:11     at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA12275) 08/09/23 10:23:11     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA12275) 08/09/23 10:23:11     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA12275) 08/09/23 10:23:11     at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA12275) ..... .....   The reason for this error is the certificate for root authority that is not installed on the OAS. The solution is to import Root CA certificate in the JDK embedded inside OAS: Open a web browser and access the Agile web client via https://... Double click on the padlock in the lower right corner of the browser window Select Details and then select the "Copy to File" button Answer the prompts using the defaults and select a filename for the .cer file. Open a command window (Start -> Run -> cmd) Navigate to the [OASHome]\jdk\bin directory Type the following command: keytool -import -keystore [OASHome]\jdk\jre\lib\security\cacerts -file c:\temp\AgileProxy.cer When prompted for the Certificate store password type changeit and then hit Enter When prompted to load the certificate, type yes and hit enter Restart OAS Related: Note 569235.1 - Unable to add or get file attachments because OAS cannot recognize SSL Cert loaded on Proxy server You are welcome to leave a comment.. Aviad