Securing Airlock IAM with HTTPS
Airlock Gateway and Microgateway communicate through HTTP requests and responses with Airlock IAM. HTTPS/TLS can be used to secure the communication between IAM and its client, including Airlock Gateway/Microgateway.
Info
By default, a self-signed TLS certificate is generated for each gateway instance. The default certificate is valid for 10000 days. For improved security, it is recommended that you create and manage your own key infrastructure, and use certificates with shorter validity.
Further information and links
- Tomcat 10.1 SSL Howto: https://tomcat.apache.org/tomcat-10.1-doc/ssl-howto.html