Installing Universal Queue
Install only one instance of Universal Queue in a system. Installing the Universal Queue installs Tomcat, you need a server-type certificate and a keystore to make the Tomcat connection secure.
-
Create a certificate:
-
Generate a certificate request for the server authentication (use OID=1.3.6.1.5.5.7.3.1 in the request)
-
Receive and install the certificate. If you have selected Windows Personal Certificate Store for the Keystore Type, place the certificate in the folder of personal certificates of the HAC service user.
Note:Windows Personal Certificate Store works only in Windows Server 2012, or newer.
-
-
Install the Universal Queue VU with IA, see .Universal Queue Variables.
-
If you have selected Java keystore during installation, you need one, see Generating Java Keystore. Place the file in the folder [VU_UQ]\UniversalQueue\cert.
Secure HTTPS connection between CEM Server and Universal Queue is supported as of 1705.
The protocol is selected in the following ways:
-
HTTPS with client authentication is used when there is an internal server certificate defined for CEM Server variables Internal Server Certificate in Use and Internal Server Certificate Common Name or Internal Server Certificate Issuer, and that same certificate is used for the Universal Queue variable Certificate Name or Alias for Client Authentication, and its public key is saved in the Truststore File for Client Authentication, and the UQ variable TCP Port Number for Client Authentication is defined.
-
HTTPS without client authentication is used when there is an internal server certificate defined for CEM Server variables Internal Server Certificate in Use and IInternal Server Certificate Common Name or Internal Server Certificate Issuer, and the UQ variable TCP Port Number for HTTPS is defined but the TCP Port Number for Client Authentication is not defined.
-
HTTP is used if there is no internal server certificate defined for CEM Server, or in Universal Queue only the port TCP Port Number for HTTP is defined.