Discussion
Mindtree
IN
Last activity: 6 Apr 2018 19:26 EDT
Is there an Upgrade Impact due to Security Profile
Hi,
I am working on upgrade for a customer who has insurance related application developed in PRPC 6.2 SP 2. While we were analysing their code base we noticed that their connectors refer to security profile under advanced tab. The Security Profile refers to a keystore file.
My question here is will there be any impact after the upgrade to Pega 7, do we need to take care of anything specific post upgrade?
**Moderation Team has archived post**
This post has been archived for educational purposes. Contents and links will no longer be updated. If you have the same/similar question, please write a new post.
Pegasystems Inc.
IN
Pega 7.1.8 has changed the the SSL certificate loading logic and Its a good practice to add keystore and truststore at Pega level now for connectors because its easier maintaince and portability. Ensure that the signer certificates and the each of its intermediate certificates in the certification path are imported to the Pega’s Appserver JVM’s truststore. The same should be done for all the appserver JVMs participating in SSL communication on your PRPC cluster.
If your environment is already following above best practise, then security profile /keystore should not be a issue for Pega 7 upgrade.
Scotiabank
CA
Hi,
I am upgrading from Pega 6.3 to 7.1.9, I need a clarification.
As per my understanding earlier Truststore/Keystore information for SOAP connectors could be configured in WS Security profile of the connector rule but it was not possible for REST/HTTP connectors, for REST/HTTP it has to be defined at server container level, now in Pega 7.1.8 it is possible to define Truststore/Keystore information at rule form of REST/HTTP connector. So post upgrade we need to update the REST/HTTP connector rule forms accordingly. Also there are no changes for SOAP Connectors. Is this understanding correct or do I need to make changes after upgrade in the SOAP Connector rules.
My application contains more than 200 SOAP connector rules, so if I need to update all soap connectors it will be a significant effort to consider.