For API providers who are setting up a web server to respond to API requests over MV-SIPN, it is important to set up a mutually trusted connectivity between the web server and Swift. Follow the guide below to set up the web server certificate.

Step 1: Create Web Server certificate

We recommend creating two certificates, one for the Pilot environment and another for the Live environment. Follow the steps in Web server certificates to create them.

Step 2: Install the Swift CA Certificate in the Web Server

You can skip this step if you have completed this set up during the creation of the web server certificate, Otherwise, refer to Install the Swift CA Certificate in the Web Server.

Step 3: Set Up a 2-Way TLS Connectivity

Refer to your web server provider’s documentation if you are using a web server that is not covered below. Follow the steps to enable client authentication on the Apache WebServer (HTTPD) and Apache Tomcat Server.

Using Apache WebServer (HTTPD) on RHEL

• Check if you have installed the ssl pacakge.

• Check if you have installed the httpd package.

Using Apache Tomcat Server on RHEL

Step 4: Configure the Web Server

Step 5: Set Up Network/Firewall Configuration Towards Your Web Server

Your institution is responsible for making sure that your network set-up adheres to the recommendations outlined in the Network Configuration Tables Guide for Swift Web Access Service Providers. Pay attention to network and firewall configuration for communications between your web server and MV-SIPN.