How to enable TLS connection from VA to IQ service. what is TLS enabled port number?
Hello @shaffusailpoint !
636 is the port .
Root CA Certificate need to be exchanged .
Please refer the following docs :
Thank you! root CA means putting certificate in certificate folder of VA?
You need to get the cert from infra team and import it into IQServices server(s) and also add the certificate in the VA (/home/sailpoint/certificates), restart the CCG service in VA.
Refer the link which explains the detailed steps.
Yes. You are right . We need ti get certificate from application team as metioned by @suresh4iam and add them in Cert folder.
Just to confirm whether it should be self signed or CA signed is mandatory.
The certificates to be installed in both “Personal” and “Trusted CA” folders if they’re self-signed. You can get more details here.