Skip to main content

Securing MarkLogic Server

Creating a MarkLogic Server User with an External Name

To configure certificate-based user authentication for user, newUser1, as a MarkLogic Server user with an external name, follow these steps in the Admin Interface:

  1. Click Security in the left tree menu.

  2. Under Security, click Users.

  3. Click the Create tab.

  4. In the User Name field, enter newUser1.

  5. Enter a password.

  6. In the Confirm Password field, confirm the password.

  7. In the External Name field, enter the entire Subject field from the example shown in User Certificate Example.

  8. Click OK.

  9. In the left tree menu. under Security, click External Security.

  10. Click Create.

  11. Enter a name for the security object in the External Security Name field.

  12. From the Authentication field, select certificate.

  13. Click OK.

  14. Click Server in the left tree menu.

  15. On the Summary tab, under App Servers, click the appropriate app server.

  16. On the Configure tab, scroll down to the External Securities section.

  17. From the drop-down, select the external security object you created in Step 11.

  18. In the SSL Client Certificate Authorities section, click Show.

  19. Select the CA certificate you configured in CA Certificate (User Cert Signer) Import from Admin Interface.

  20. Click OK.