Question
NSW Justice
AU
Last activity: 18 Mar 2019 15:48 EDT
Consume a client's web service (mutual SSL) from Pega Cloud
Hi ,
Client has a webservice(enabled mutual SSL) on their private network. How do we consume the web service from Pega cloud. I think Pega cloud has to do the following actions on their side to allow the connection.
1. Import Client's certificate into Pega Cloud's intances truststore
2. Client has to import Pega Cloud's certificate into their trust store
3. Client has to open firewall to allow Pega Cloud instances ( Pega Cloud has to give their IP Addresses or IP Address ranges to the client for this . Is this a standard practice?)
Pega Cloud experts , your thoughts please. And also suggest us if there is any other way of solving the problem.
#PegaCloud
Pegasystems Inc.
IN
Hi Jayakrishna,
Thanks for posting your questions in PSC.
Please follow the steps mentioned in the below link. You can do it from the designer studio itself. Nothing needed from the server level, neither any restart or any infra level change is required.
https://collaborate.pega.com/discussion/ssl-configuration-soaprest-connectors
Pegasystems Inc.
IN
Once you are done with the above mentioned steps, you will have to raise an SR (Support Request) to get the IP addresses. Our Cloud team will share you the IPs once you complete the steps and raise an SR for the same.
Let me know if it helps.
Thanks .
NSW Justice
AU
Thanks Tara. It does answer my questions on TrustStore config at Pega Cloud end and IP addresses for whitelisting at customer end. Mutual SSL Works only if Pega Cloud's certificate is in customer API server's truststore aswell. So Can Pega Cloud provide their server's certificate?
Updated: 18 Mar 2019 15:47 EDT
Pegasystems Inc.
US
Please share with us here the SR ID when you open one. We will track it for you.