Configuring Windchill with Azure SQL Database to Use JDBC over SSL
The configuration steps to enable secure communication between Windchill Server and Azure SQL Server database using JDBC over SSL are as follows:
1. Fetch the SSL Certificate from Azure SQL server database using the following sample command:
openssl s_client -showcerts -connect <DB_SERVER_HOSTNAME>:443 </dev/null|openssl x509 -outform PEM >dbcertfile.pem
2. Import the SSL Certificate into a trust store on the Windchill Server client using the following sample command:
keytool -importcert -file dbcertfile.pem -keystore <JAVA_HOME>/lib/security/cacerts -alias testJDBCSSL
3. Add the below properties to the site.xconf file and propagate these to the db.properties file using xconfmanager utility.
wt.pom.dbConnectionPropertiesNameList=encrypt,javax.net.ssl.trustStore
wt.pom.dbConnectionPropertiesValueList=true,{wt.jdk}/lib/security/cacerts
4. Restart the Windchill Server.