Secure an External Database Connection

Secure the Gateway Connection

Follow the directions below to modify the settings of your Entrust Identity as a Service Gateway to log in over Secure Shell (SSH). For more information, refer to Enable SSH on an Enterprise Service Gateway.

1. Open the Identity as a Service Gateway web interface or application.
2. For Gateways 5.4.1 or earlier:
   1. Enter the following into the command prompt:

   sudo systemctl enable sshd

   2. Enter the following into the command prompt:

      sudo systemctl start sshd

3. For Gateways 5.5 or later:
   1. Click Services.
   2. Select SSH Service.
   3. Click Enable.
   4. Click Start.

The connection between Identity as a Service Gateway and the external database is now secure.

Secure the Connection to the Database

Note: Using a secure connection between Instant ID as a Service and an external database requires installing the database software and OpenSSL before configuring the connection. Please refer to the documentation for your database to generate required certificates and to configure the database for SSL.

1. Generate the required Certificate Authority (CA), wallet, and/or server certificate for the database.
2. Configure the database for SSL. For more information, consult your Oracle, MySQL, SQL Server, or PostgreSQL documentation.
3. Restart the database.
4. Import the certificates generated in Step 1 into the Entrust Identity as a Service Gateway.
5. Add the external database in Instant ID as a Service. For more information, refer to Enable and Configure an External Database for Enrollments.
   1. Select the checkbox beside Use SSL? on the Add External Database dialog box.
   2. Upload the certificate created in Step 1 above.
   3. Click Add.