Method 3: Configure Spectrum with your own, self-signed certificates

Note: This configuration is not recommended for production environments.

3. Set encryption settings in the server location, <spectruminstallationdirectory>/server/app/conf/certs

4. Change the following properties in spectrum-container.properties:

  1. Stop the Spectrum server.
  2. Create the keystore and truststore and copy to the <spectruminstallationdirectory>/server/app/conf/certs folder. This is the required location.
  3. Set encryption settings in the server location, <spectruminstallationdirectory>/server/app/conf/certs.
  4. Change the following properties in spectrum-container.properties:
    • spectrum.encryption.enabled=true
    • spectrum.encryption.selfSignedCert=true
    • spectrum.encryption.trustAllHosts=true
      Note: Set spectrum.encryption.trustAllHosts to true only if a single certificate will be used across multiple hosts.
    • spectrum.encryption.node.keystoreType=pkcs12 or jks
    • spectrum.encryption.node.keystore=node-keystore.p12
    • spectrum.encryption.node.keystorePassword=<keystorepassword>
    • spectrum.encryption.node.keystoreAlias=<keystore alias, if one applies>
    • spectrum.encryption.node.truststoreType= pkcs12 or jks
    • spectrum.encryption.node.truststore=truststore.p12
    • spectrum.encryption.node.truststorePassword=<truststorepassword>
    • spectrum.encryption.client.keystoreType= pkcs12 or jks
    • spectrum.encryption.client.keystore=client-keystore.p12
    • spectrum.encryption.client.keystorePassword=<keystorepassword>
    • spectrum.encryption.client.keystoreAlias=<keystore alias, if one applies>
    • spectrum.encryption.client.truststoreType= pkcs12 or jks
    • spectrum.encryption.client.truststore=truststore.p12
    • spectrum.encryption.client.truststorePassword=<truststorepassword>
  5. Start the Spectrum server.