System information

17
CONFIGURING AND ADMINISTERING COLDFUSION 9
Using the ColdFusion Administrator
Last updated 2/21/2012
To use SSL, create a keystore file. The keystore is a self-signed certificate. (You do not need a certificate signed by a
Certificate Authority, although if you do use one, you do not need to configure Flex as indicated in the following steps.)
The information in the keystore is encrypted and can be accessed only with the password that you specify. To create
the keystore, use the Java keytool utility, which is included in the Java Runtime Environment (JRE).
Enable SSL
1 Create the keystore.
2 Configure Flex.
3 Enable SSL in the ColdFusion Administrator.
Create the keystore
❖ To generate the SSL server (ColdFusion) keystore file, use the keytool utility, with a command similar to the
following:
keytool -genkey -v -alias FlexAssembler -dname "cn=FlexAssembler" -keystore cf.keystore -
keypass mypassword -storepass mypassword
The following table describes the parameters of the keytool utility:
Place the certificate you created in the file that the JVM uses to determine what certificates to trust. The file in which
you place the certificate (usually named cacerts), is located in the JRE, in the lib/security folder.
Option Description
Enable Flash Remoting
Support
Specifies whether to enable Flash clients to connect to this ColdFusion server and invoke methods in ColdFusion
components (CFCs).
Enable Remote LiveCycle
Data Management Access
Specifies whether to enable a LiveCycle Data Services ES server to connect to this ColdFusion server and invoke
methods in CFCs to fill, sync, get, or count records in a result set used in a Flex application. Enable this option only
if you are running LiveCycle Data Services ES remotely.
Server Identity Specifies the ColdFusion server on which you want to enable Flex Data Management Support.
Enable RMI Over SSL For
Data Management
To encrypt communication between ColdFusion and Flex, enable Secure Sockets Layer (SSL).
Select IP Addresses Where
LiveCycle Data Services
Are Running
Specifies which LiveCycle Data Services ES servers can connect to the LiveCycle Data Services ES support in
ColdFusion. If you do not specify a list of allowed IP addresses, only processes on the local computer can connect
to the LiveCycle Data Services ES support in ColdFusion
Parameter Description
-alias The name of the keystore entry. You can use any name for this, as long as you are consistent when referring
to it.
-dname The Distinguished Name, which contains the Common Name (cn) of the server.
-keystore The location of the keystore file.
-keypass The password for your private key.
-storepass The password for the keystore. The encrypted storepass is stored in ColdFusion configuration files.
-rfc Generates the certificate in the printable encoding format.
-file The name of the keystore file.
-v Generates detailed certificate information