BAC HTTPS login

[monitoring.live]

In order to open an access to HP BAC, our security team demanded to enable HTTPS to the BAC login page.

I looked in the BAC documentation, and found the following procedure:

1. Enable SSL on the web server itself
2. On the Business Availability Center Gateway, open <Business Availability Center installation dir>/AppServer/site.war/WEB-INF/web.xml. 
3. 3 Set IsHTTPSForce attribute to "true". 
4. 4 Restart the Business Availability Center Gateway.

Now, in step 2, I couldn't find a proper dir, it seems like a typo, and the file actually in /AppServer/WebApps/site.war/WEB-INF/web.xml

In step 3, I couldn't find the IsHTTPSForce parameter in the file at all.

And in overall, after creating the IIS SSL certificate, the BAC spider view became blue (No data update).

Did someone suceed enabling the HTTPS BAC login?

[parkar]

Please follow hardening guide..Also please check proper steps for IIS or apache you are using

[monitoring.live]

The steps I mentioned above are from the hardening guide.

Can you point out on the missing steps please?

[parkar]

Can you please tell me where the SSL certificate is being generated and installed? Which document are you following for the SSL part?

Which web server you are using

Please find attched doc also for reference

[monitoring.live]

Hi,

Thank you for your help.

The SSL part is done by our system admin.

We use a windows BAC installation with IIS 6

I followed page 75 in the attached document.

[Dave D. · Accepted solution]

If you're using BAC 8.06, definitely <Business Availability Center installation dir>/AppServer/site.war/WEB-INF/web.xml should exist.  Perhaps you're looking on the BAC Data Processing Server instead of the Gateway server?  It's definitely will not be present on the BAC DPS.

[monitoring.live]

Thank you, I understood my mistake here - we are using BAC 8.04, for which the procedure is different.