For Changed Data Transfer, secure communication from OS 2200 Agent to Runtime Service can be established by configuring some parameters in the Data Exchange Runtime Service configuration file.
To enable secure connection,
Install the SSL certificate on the OS 2200 host.
On the machine where you have installed Runtime Service,
install the same certificate you used in AIS in the Current User or Local Machine certificate store.
install the certificate chain of the Certificate Authority in the Trusted Root Certification Authorities.
Configure the following parameters in the Data Exchange Runtime Service configuration file:
OS2200EnableSecureConnection: This enables or disables the secure connection between OS 2200 Agent and the Runtime Service for CDT. The default value is False. To enable secure connection set the value to True.
OS2200CertStoreName: This is the name of the certificate store. Value can be any one of
My: The certificate store for personal certificates.
Root: The certificate store for trusted root Certificate Authorities (CAs).
Trusted People: The certificate store for directly trusted people and resources.
Trusted Publisher: The certificate store for directly trusted publishers.
OS2200CertIssuedToCommonName: This is the common name of the host associated with the certificate. In the Management Console of the certificate, open the certificate, and then click Details. You can find the common name (CN) in the Subject field.
OS2200CertIssuedByCommonName: This is the common name of the certificate issuer. In the Management Console of the certificate, open the certificate, and then click Details. You can find the common name (CN) in the Issuer field.
OS2200CertStoreLocation: This is the location where the certificate is installed. It can be either CurrentUser or LocalMachine.
OS2200CertSerialNumber: This is the identity of the certificate. In the Management Console of the certificate, open the certificate, and then click Details. You can find the value in the Serial Number field.
Providing the serial number is optional. The Runtime Service can identify the certificate using Subject name and Issuer name. But if there are other certificates with the same values, you need to provide the Serial number for Runtime Service to identify the correct certificate.
Restart Runtime Service. You can verify the secure connection configuration by checking the Runtime Service log file.