Installation and User's Guide

5. Due to system performance concerns, use SSL only for sessions where it isneeded. Consider adding additional processor resources on the Tivoli StorageManager server system to manage the increased requirements.After the server certificate has been added to the client key database, add the sslyes option to the client options file, and update the value of the tcpport option. It isimportant to understand that the server is normally set up for SSL connections ona different port. In other words, two ports are opened on the server:1. One port accepts regular non-SSL client connections2. Another port accepts SSL connections onlyYou cannot connect to a non-SSL port with an SSL-enabled client, and vice versa.If the value of tcpport is incorrect, the client cannot connect to the server. This isnormal behavior that you can correct by specifying the correct port number.Related reference“Ssl” on page 480Certificate Authorities root certificatesWhen the Tivoli Storage Manager Backup-Archive client is delivered, it includes alist of root certificates for a number of common Certificate Authorities.Here is the list of root certificates for a number of common Certificate Authoritiesthat are delivered with the client:v Entrust.net Global Secure Server Certification Authorityv Entrust.net Global Client Certification Authorityv Entrust.net Client Certification Authorityv Entrust.net Certification Authority (2048)v Entrust.net Secure Server Certification Authorityv VeriSign Class 3 Public Primary Certification Authorityv VeriSign Class 2 Public Primary Certification Authorityv VeriSign Class 1 Public Primary Certification Authorityv VeriSign Class 4 Public Primary Certification Authority - G2v VeriSign Class 3 Public Primary Certification Authority - G2v VeriSign Class 2 Public Primary Certification Authority - G2v VeriSign Class 1 Public Primary Certification Authority - G2v VeriSign Class 4 Public Primary Certification Authority - G3v VeriSign Class 3 Public Primary Certification Authority - G3v VeriSign Class 2 Public Primary Certification Authority - G3v VeriSign Class 1 Public Primary Certification Authority - G3v Thawte Personal Premium CAv Thawte Personal Freemail CAv Thawte Personal Basic CAv Thawte Premium Server CAv Thawte Server CAv RSA Secure Server Certification Authority30 IBM Tivoli Storage Manager for Windows Backup-Archive Clients: Installation and User's Guide