Enable TLS for My MATRIXX

Enable Transport Layer Security (TLS) connections for My MATRIXX with configuration changes and an alias for localhost.

About this task

These steps assume a non self-signed certificate that accepts a host name alias with a host name that resolves to the IP address of the server running My MATRIXX.
Important: Only use certificates obtained from a reputable and trusted certificate authority.

Procedure

  1. Create a matrixx.yaml in the /opt/mtx/conf directory with the following contents: 
    server: 
    port: 8082 
    ssl: 
        enabled: true 
        key-store-type: PKCS12
        key-store: file:///keystore/keystore.p12 
        key-store-password: keystore-password
        key-alias: '*alias.com'
    Where:
    • port — The port number to access My MATRIXX. The default port for My MATRIXX is 8082. Setting the port value is optional.
    • enabled — Set to true to enable TLS.
    • key-store-type — The format used for the keystore. Set to JKS for a JKS file.
    • key-store — The path to the keystore containing the certificate.
    • key-store-password — The password used to generate the certificate.
    • key-alias — The key alias.
    Note: You must customize these properties for your implementation.
  2. Start My MATRIXX with the following command: 
    sudo systemctl start mtx_mymatrixx
    Important: Either sudo systemctl stop mtx_mymatrixx or /opt/mtx/bin/stop_mymatrixx.sh can be used to stop My MATRIXX.