Enabling encryption between Sametime and the LDAP server 

---

Configure SSL encryption between an IBM® Sametime server and an LDAP server by enabling the LDAPS protocol.

About this task

When you enable this protocol, you can choose whether to encrypt only the data used for authenticating users in Sametime, or to encrypt all data that is transmitted between the two servers.

Note: If you are using an IBM Lotus® Domino® Directory and it is not configured as an LDAP directory, this section does not apply to you. You can skip these procedures.

Enabling SSL encryption for an LDAP server involves the following tasks:

1. Enabling SSL on the LDAP server
You must enable SSL on your LDAP server before you can configure the IBM Sametime server to encrypt its communications with the LDAP directory.

2. Using SSL to encrypt connections between the Sametime and LDAP servers
When Sametime® is configured to connect to an LDAP server, the Sametime Community Server makes five separate connections to the LDAP server.

3. Setting up a keystore for the SSL certificate used by the LDAP server
On IBM AIX®, Linux®, Microsoft® Windows®, and Sun Solaris, install the GSKit program and the IBM IKeyMan utility so you can store a copy of the LDAP server's SSL certificate. On IBM i, Sametime Community Server comes with the IKeyMan utility already installed, but you must install DCM software instead; the instructions are in this section.

4. Importing a copy of the LDAP server's trusted root certificate
Import a copy of the LDAP server's trusted root SSL certificate into the keystore database on the IBM Sametime server to encrypt communications between Sametime and the LDAP server.

5. Configuring Directory Assistance for SSL
Modifying the IBM Lotus Domino Directory Assistance document is required when you use SSL to encrypt data transmitted between the IBM Sametime and the LDAP server.

6. Connecting Sametime to the LDAP server
Enable SSL encryption for connections between IBM Sametime and the LDAP server.

7. Modifying the LDAP server configuration for SSL
Modify the configuration of the IBM Sametime server to encrypt connections between the LDAP server and the Sametime Community Server.

8. Encrypting the UserInfo servlet
If your IBM Sametime deployment uses SSL encryption when communicating with the LDAP server, you can additionally choose to encrypt the UserInfo servlet.

Parent topic: Configuring Sametime Community Server to use SSL encryption