Configuring JBoss to use SSL Key and Certificate Present on Utimaco HSM

Copy the CryptoServer.cfg file under Jboss configuration directory.

›_ Console
`# cp /home/jboss/CryptoServer.cfg /opt/EAP- 7.4.0/standalone/configuration/CryptoServer`

Open the $JBOSS_HOME/standalone/configuration/standalone.xml file.
Edit the <ssl> configuration under the <management> <security-realms> section, as indicated below:

standalone.xml
`<security-realm name="ApplicationRealm"> <server-identities> <ssl> <keystore path="CryptoServer" provider="CryptoServer" relativeto="jboss.server.config.dir" keystore-password="12345678" alias="jbossrsa" /> </ssl> </server-identities>`

standalone.xml

<security-realm name="ApplicationRealm"> 

<server-identities> 

<ssl> 

<keystore path="CryptoServer" provider="CryptoServer" relativeto="jboss.server.config.dir"  

keystore-password="12345678" alias="jbossrsa" /> 

</ssl> 

</server-identities>

Update alias name and keystore password according to your setup.

Restart the jboss service.

›_ Console
`# systemctl restart jboss-eap-rhel`

Open any browser and access the URL https://< jboss_ip_address>:8443.
After the page is loaded, verify the SSL certificate details.

Loading page over HTTPS

This completes the integration of JBoss Enterprise Application Platform with Utimaco SecurityServer using CryptoServer JCE.