Scenario 4 - Encrypted Connection Between the Intrexx Portal Server and Third-Party Systems (Integrations)

When connecting Intrexx to third-party systems, it is important to distinguish whether Intrexx is consuming or providing data. When Intrexx consumes data—that is, when it acts as a client—only a certificate with a public key needs to be stored in Intrexx. If Intrexx provides data—that is, acts as a server—a certificate containing a public and private key must be stored in Intrexx.

Consume data

Intrexx offers integrations with numerous third-party systems.

To establish an encrypted connection to these systems, you need a certificate from the operators of the third-party systems that contains the public key.
You must save this in your portal's central certificate store.

Note: By default, the central certificate store contains a number of certificates from trusted certification authorities. These are shipped with the JDK included in Intrexx. Therefore, with common third-party systems hosted in the cloud, it is possible that the certificate is already present in the central certificate store.

Step-by-Step

To import a certificate into your portal's certificate store, follow these steps:

  1. Open the portal properties ("Portal > Portal Properties").

    You will be taken to the "Edit Portal pagee.

  2. Click "Certificates."

    You will be taken to the "Certificates" page.
    The lock icon and the link are displayed only if you have not yet accessed the certificate store during the current session.

  3. Click here to access the certificate store.

    The "Certificate Store Password" dialog box will appear.

    Enter "changeit" as the password if you haven't yet set your own password for the certificate store. (You can set a separate password for the certificate store in the following window.)

    Enter your own password if you have set one for the certificate store.

  4. Click "OK."

    You will be taken to the overview of the certificates included with Intrexx.

  5. Click +.

    This will take you to the "Certificate Import" dialog box.

    Name

    Description

    Download from URL

    You can download a certificate here. Enter the appropriate URL.

    Download from a Web Address

    Allows you to download certificates.

    Server / Port

    Enter the download server (by name or IP address) and the port here.

    Import the file

    This option allows you to include a certificate file.

    Add File

    Opens a dialog box where you can select a certificate file.

    Importing the Certificate Text

    Allows you to import certificate texts directly. Paste the appropriate text into the input field.
    This option may be useful if, for example, the certificate is available as a PEM file.
    The file might look something like this:
    -----BEGIN CERTIFICATE-----
    aiwdjpawipAUWEIadlwidhalwihdPAIWHDLAIwhd
    (...)
    aldi13u08142eodaildwycaG9730e8z1qCcadho8
    -----END CERTIFICATE-----

  6. Please enter the required information.

  7. Click "Next."
    The following dialog box displays details about the previously selected certificate.

  8. Click "Next."

  9. In the next dialog box, enter an alias name for the certificate.



    The certificate can be identified in the certificate store by its alias.

  10. Click "Finish."
    You will be returned to the certificate store. The certificate you imported will be displayed.
    You have imported a certificate into your portal's certificate store.

Reset Certificate Store

Provide Data

Intrexx can provide data for OData (and web services).

In this case, you'll need to manually create your own keystore and save the certificate—along with the public and private keys—in it.
To make data available via OData, Intrexx uses "Jetty." The keystore must be stored in the Jetty web server.
For more information about "Jetty," please visit the following link: https://www.eclipse.org/jetty/