Passwordless (SSL-cert based) connection from AEM to MSSQL

[rajatkumar]

Hi All, 

We have a requirement as part of our compliance suite under which all non-personal technical accounts should go password-less basically SSL-Cert based connection.

As part of AEM, we have one user which connects to MSSQL DB using password as mentioned in here [0] {Create the AEM Forms User in SQL Server}.

[0] https://helpx.adobe.com/pdf/aem-forms/6-3/prepare-install-single-server.pdf
While running the configuration manager, on datasource configuration screen, we provide this user along with the password.

Is to possible to establish this connection without directly using password, instead some other way like 2-way-ssl, mentioned here [1]
[1] https://www.dbi-services.com/blog/aem-forms-2-way-ssl-setup-and-workbench-configuration/

While configuring 2-way SSL for the workbench, configuration of our Application Server is also needed to handle the 2-way-SSL communications by setting the “Two Way Client Cert Behavior” to “Client Certs Requested and Enforced” in the SSL subtab of the Managed Server(s) hosting the AEM Forms applications.
Will that also be needed if we want to configure this type of communication from MSSQL to AEM?

Application stack details :-
- AEM 6.5
- Forms JEE 6.5.0.-0053

- WebSphere Base 9.0.5.13
- MSSQL 2019
- Linux RedHat_7.9


Any guidance is much appreciated.

Thanks,
Rajat

[Pulkit_Jain_]

@rajatkumar 

There is an ongoing discussion with the product team on this topic, I assume you've raised a support ticket for this one.

You'll hear back from the team shortly.

[rajatkumar]

Hi @Pulkit_Jain_ 
Affirmative!! We have logged a support ticket for the same. Pleasure to know that Product team is looking into this.
Just wanted to check with the community if somebody has implemented the exact use case or a slight variation of this.

Also, could you please share where can I find the "adobe-usermanager-ssl-dsc.jar" to enable SSLMutualAuthProvider in the list of custom providers while creating the Hybrid Domain on the AdminUI.

[Pulkit_Jain_ · Accepted solution]

@rajatkumar 

Don't have a JEE set-up handy, but you can check the EAR libs folder or the JEE installation deploy folder for this jar?