Passwordless (SSL-cert based) connection from AEM to MSSQL | Community
Skip to main content
rajatkumar
rajatkumar
Level 2
February 15, 2023
Solved

Passwordless (SSL-cert based) connection from AEM to MSSQL

  • February 15, 2023
  • 1 reply
  • 905 views

Hi All, 

We have a requirement as part of our compliance suite under which all non-personal technical accounts should go password-less basically SSL-Cert based connection.

As part of AEM, we have one user which connects to MSSQL DB using password as mentioned in here [0] {Create the AEM Forms User in SQL Server}.

[0] https://helpx.adobe.com/pdf/aem-forms/6-3/prepare-install-single-server.pdf
While running the configuration manager, on datasource configuration screen, we provide this user along with the password.

Is to possible to establish this connection without directly using password, instead some other way like 2-way-ssl, mentioned here [1]
[1] https://www.dbi-services.com/blog/aem-forms-2-way-ssl-setup-and-workbench-configuration/

While configuring 2-way SSL for the workbench, configuration of our Application Server is also needed to handle the 2-way-SSL communications by setting the “Two Way Client Cert Behavior” to “Client Certs Requested and Enforced” in the SSL subtab of the Managed Server(s) hosting the AEM Forms applications.
Will that also be needed if we want to configure this type of communication from MSSQL to AEM?

Application stack details :-
- AEM 6.5
- Forms JEE 6.5.0.-0053

- WebSphere Base 9.0.5.13
- MSSQL 2019
- Linux RedHat_7.9


Any guidance is much appreciated.

Thanks,
Rajat


This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Pulkit_Jain_

@rajatkumar 

Don't have a JEE set-up handy, but you can check the EAR libs folder or the JEE installation deploy folder for this jar?

1 reply

Pulkit_Jain_
Adobe Employee
Pulkit_Jain_Adobe Employee
Adobe Employee
February 16, 2023

@rajatkumar 

There is an ongoing discussion with the product team on this topic, I assume you've raised a support ticket for this one.

You'll hear back from the team shortly.

    rajatkumar
    rajatkumarAuthor
    Level 2
    February 16, 2023

    Hi @pulkit_jain_ 
    Affirmative!! We have logged a support ticket for the same. Pleasure to know that Product team is looking into this.
    Just wanted to check with the community if somebody has implemented the exact use case or a slight variation of this.

    Also, could you please share where can I find the "adobe-usermanager-ssl-dsc.jar" to enable SSLMutualAuthProvider in the list of custom providers while creating the Hybrid Domain on the AdminUI.

      Pulkit_Jain_
      Adobe Employee
      Pulkit_Jain_Adobe EmployeeAccepted solution
      Adobe Employee
      February 17, 2023

      @rajatkumar 

      Don't have a JEE set-up handy, but you can check the EAR libs folder or the JEE installation deploy folder for this jar?

        Terms & ConditionsAccessibility statement

        Loading footer...