beautypg.com

4 enable connector security, Certificate authorities, Self-signed certificates – Google Search Appliance Connectors Administration Guide User Manual

Page 19

background image



4 Enable Connector Security

In secure mode, the connectors communicate with the Google Search Appliance over
HTTPS. You can enable security for any connector by configuring certificates and turning on
security.

Take note that you must enable security for the Connector for SharePoint and the
Connector for SharePoint User Profiles.

Secure mode supports using either of the following types of certificates:

Certificate Authorities (CA’s)

Self-signed certificates


In either case, you can also choose options to

enable stricter security

.

Certificate Authorities

The GSA and the connector executable both have default Certificate Authorities; public
keys are already in the GSA and connector trust stores. For the connector, you can find the
default keystore CAs under jre\lib\security\.

If you are using the default CA’s only, complete the tasks described in the following
sections:

Exchange certificates

Turn on security


By default, the search appliance alias is “gsa” and the connector alias is “adaptor.”
Optionally, you can configure either alias.

Self-signed certificates

If you need to create self-signed certificates before turning on security, complete the tasks
described in the following sections:

Create a self-signed certificate for the GSA

Create a self-signed certificate for the connector