SSL Certification

The IBM Architecture Room LIVE! web server uses HTTPS, and you need to decide the SSL certificate that must be used. You can choose one of the following two options.

Certificate configuration

  • Use your own SSL certificate. This is the recommended approach for a IBM Architecture Room LIVE! installation that is intended for a production environment. The connection to the server will be secure and users will not get any warnings from the browser.

    In some instances, you might have to extract the .crt and .key files from the .pfx file, so that the certificate and the decrypted key files are available separately in a plain text format. For more information. see Extracting the certificate and keys from a .pfx file.

  • Use a self-signed SSL certificate. You can use this approach if you don’t yet have your own SSL certificate to use. However, in this case users will get warnings from the web browser about the use of a self-signed certificate as the server will not be considered secure.
The IBM Architecture Room LIVE! installation contains the self-signed certificates in the following locations:
  • home server: <live-install-folder>\liveHomeServer\lib_server\config
  • authentication server: <live-install-folder>\liveAuthServer\lib_server\config
  • room server: <live-install-folder>\liveRoomServer\lib_server\config
Replace the certificate drlive.crt and drlive.key files with your self-signed certificates and keys for all three servers. The web servers will then use the self-signed certificate by default.

Port configuration

  • SSL port:

    By default, IBM Architecture Room LIVE! uses the port 443. To change the default port, update the SSL port parameter sslPort:<portnumber> in the <live-install-folder>\liveHomeServer\user_config.js file.

  • Audio server port:

    By default, the audio server uses the port 452. To change the default port, update the audio port parameter audioPort:<portnumber> in the <live-install-folder>\liveHomeServer\user_config.js file.