You are viewing limited content. For full access, please sign in.

Question

Question

TLS encryption on network traffic to the Full Text Search Engine server?

asked on May 6, 2024

Is TLS an option anywhere for Full Text Search engines that are not installed on the same server as the repository service?

0 0

Answer

SELECTED ANSWER
replied on May 6, 2024 Show version history

Yes. Just recently did this for a customer on LFS/LFFTS 11. 

First, bind a valid TLS certificate (with Server Authentication role) to port 5053 on the Laserfiche Full-Text Search (LFFTS) server.

The only UI I'm aware of that lets you enable TLS for LFFTS is the Laserfiche Administration Console "Register Repository" wizard. There may be some alternative way of enabling it for an already registered repository, but I've looked pretty hard and haven't found where that setting is stored.

So in Admin Console:

  1. Take note of all relevant repository settings (SQL Server, database, repository directory, audit directory (if different), etc.)
  2. Detach the repository
  3. Reattach the repository, making sure to check the "Use SSL/TLS" box on the search engine page
  4. Set a recurring reminder to renew and rebind the port 5053 certificate for LFFTS before it expires. Automate this if possible.
0 0
replied on May 7, 2024

Perfect, thank you!

1 0

Replies

You are not allowed to reply in this post.
You are not allowed to follow up in this post.

Sign in to reply to this post.