2.9.11 enable-secure-admin

Synopsis

asadmin [asadmin-options] enable-secure-admin [--help]
    [--adminalias=alias]
    [--instancealias=alias]

Storage location

Application Server installation directory/javaee/glassfish/bin

Function

The enable-secure-admin subcommand enables secure admin (if it is not already enabled), optionally changing the alias used for DAS-to-instance admin messages or the alias used for instance-to-DAS admin messages. It causes the DAS and the instances in the domain to use SSL certificates for encrypting the messages they send to each other. This subcommand also allows the DAS to accept administration messages from remote admin clients such as the asadmin utility and IDEs. By default, when secure admin is enabled, the DAS and the instances use these SSL certificates to authenticate each other as security "principals" and to authorize admin access. The --adminalias value indicates to the DAS which SSL certificate it must use to identify itself to the instances. The --instancealias value determines for instances, which SSL certificate they must use to identify themselves to the DAS. The enable-secure-admin subcommand fails if any administrative user in the domain has a blank password.

The enable-secure-admin subcommand fails if any administrative user has a blank password.

Precondition

Domain Administration Server (DAS) is running, and not any instances.

HTTPS ports of DAS must be open.

Enable the required settings to open the HTTPS port of instance.

Arguments

--help | -?

Displays the help text for the subcommand.

--adminalias=alias

Specifies the alias that refers to the SSL/TLS certificate on the DAS. This alias is used by the DAS to identify itself to instances.

Type: String

The following values can be specified:

• Alias name of the SSL/TLS certificate

Default value: s1as

--instancealias=alias

Specifies the alias that refers to the SSL/TLS certificate on the instances. This alias is used by the instances to identify themselves to the DAS.

Type: String

The following values can be specified:

• Alias name of the SSL/TLS certificate

Default value: glassfish-instances

asadmin enable-secure-admin --adminalias adtest --instancealias intest

Exit Status

Exit Status	Explanation
0	subcommand executed successfully.
1	error in executing the subcommand.