SSL Decryption Wizard
The SSL Decrypt a service wizard provides a step-by-step process to correctly configure SSL decryption. The wizard performs the following:
- Enables SSL decryption for an SSL virtual server.
- Assigns an SSL certificate from the Catalog to the virtual server.
- Enables SSL encryption for the default pool used by the virtual server.
- Changes all protocol types to the underlying (non-SSL) protocol type.
To use the SSL Decrypt a service wizard, you must have at least one SSL virtual server (of any type). If you do not have the necessary SSL certificates, the Virtual Traffic Manager helps you create a certificate from the wizard.
To use the SSL Decrypt a service wizard
- Adjacent to the Help link in the toolbar, click the "Wizards" drop-down list and choose SSL Decrypt a service. A new window opens which explains that the wizard configures the service to be decrypted on receipt, and re-encrypts traffic before being passed to a pool. Click Next.
- Select the service you want to decrypt. Note that only virtual servers that use an SSL protocol are listed. Click Next.
- Choose which certificate to use to decrypt the incoming requests (or click Create New to add a certificate now). Click Next.
- Choose a protocol type. This is the underlying decrypted protocol. For instance, HTTPS requests are decrypted to HTTP internally, so choose the underlying protocol HTTP as this matches the protocol type you are accepting, without the SSL wrapping.
- Click Finish to complete the wizard.