Prerequisites

You have obtained the trust certificate of the third-party system.

Run the following command to convert the certificate in .pfx format to the .cer format supported by APIGWService:

openssl pkcs12 -in *.pfx -out CA.cer -nokeys -cacerts

If the following information is displayed, enter the PFX certificate password:

Enter Import Password:

Procedure

1. On the eSight O&M plane, choose System Management > Northbound > NBI from the main menu.
2. In the navigation pane, choose API Gateway > General Configuration.
3. In the Secure Connection area, set Verify certificate to Yes.
   • To verify the common name (CN) or subject alternative name (SAN) in the certificate, you need to enable Verify CN/SAN.
   • If CN/SAN verification is enabled, eSight will verify the CN and SAN of the third-party system identity certificate. To improve communication security, you are advised to enable CN/SAN verification.

4. Import the trust certificate of the third-party system to the trust certificates of APIGWService.
   1. On the eSight O&M plane, choose System Management > Certificate > Service Certificate from the main menu.
   2. In the navigation pane, choose Service Certificate Management and click the APIGWService card.
   3. On the APIGWService Certificates page, click the Trust Certificate tab and click Import.
   4. On the Import Trust Certificate page, enter related information.
      • You are advised to set Certificate alias to a value different from existing certificate aliases in the trust certificate list.
      • If Certificate format is set to PKCS12 or JKS, enter the password for the certificate file in the Certificate password text box.
   5. Click Submit.
   6. In the High Risk dialog box, read the information carefully and confirm whether to import the certificate.
      • If yes, select I understand the risks and want to continue, click OK, and go to 4.g.
      • If no, click Cancel.
   7. In the dialog box that is displayed, click OK.

Procedure

1. On the eSight O&M plane, choose System Management > Northbound > NBI from the main menu.
2. In the navigation pane, choose API Gateway > General Configuration.
3. In the Secure Connection area, disable Enable HTTPS.
4. In the Warning dialog box, read the information carefully and confirm whether to use HTTP. Click OK.
5. Click Apply.
6. In the High Risk dialog box, read the information carefully and determine whether to apply the configuration.
   • If yes, select I understand the risks and want to continue, click OK, and go to 7.
   • If no, click Cancel.

7. In the dialog box that is displayed, click OK.

Procedure

1. On the eSight O&M plane, choose System Management > Northbound > NBI from the main menu.
2. In the navigation pane, choose API Gateway > Access Configuration.
3. In the Global Traffic Control Policy area, set the maximum number of requests and connection frequency.
4. Click Apply in the lower right corner.
5. In the High Risk dialog box, read the information carefully and determine whether to apply the global traffic control policy.
   • If yes, select I understand the risks and want to continue, click OK, and go to 6.
   • If no, click Cancel.

6. Click OK.