How do I enable an HTTPS connection between the end user and the RUM Agent?

How do I enable an HTTPS connection between the end user and the RUM Agent?

By default, end-user data is collected and transmitted to the RUM Agent over HTTP or HTTPS using a self-signed certificate. To enable HTTPS with a trusted certificate, configure the RUM Agent with a valid SSL certificate (keystore file).

It is recommended to use a certificate issued by a trusted authority, as self-signed certificates may trigger warnings in certain browsers or client environments.
NotesNote: These steps apply only to RUM Agent versions below 4.0.

Steps to Enable HTTPS for RUM Agent
  1. Enable HTTPS in AppServer.properties
    1. Open the AppServer.properties file located under <RUMAgent_Home>/conf/
    2. Search for the key apm.rum.isHttps
    3. Set the value to apm. rum.isHttps=true
    4. Save the file.
  2. Add Your SSL Certificate
    1. Copy your valid SSL keystore file into <RUMAgent_Home>/conf/sslcerts/
  3. Configure rumagent.properties
    1. Open rumagent.properties located in <RUMAgent_Home>/conf/sslcerts/
    2. Update the keystore file name in the keystore field.
    3. Remove the encryptedkeypass entry (if present).
    4. Enter your keystore password under the keypass key.
    5. Save the changes.
  4. Configure HTTPS Port (Optional)
    1. The default RUM Agent SSL port is 7443.
    2. To change it, open the sslservers.properties file under <RUMAgent_Home>/conf/ and update the SSL port value.
    3. Save the file.
  5. Restart the RUM Agent service to apply all the changes.
  6. Verify HTTPS Access
    1. In your browser, access the RUM Agent URL - https://<hostname>:<sslport>
    2. Confirm that the agent loads correctly over HTTPS.
  7. If the RUM script is already injected in your application pages, replace the existing script with a new one that references the updated HTTPS/SSL port.
Warning
Using a self-signed or untrusted certificate will break Real User Monitor data collection.
Always use a valid CA-signed certificate.
Notes
Note: If you import any certificate into the RUM Agent, ensure that the keystore password and certificate password are the same.
Supporting KBs:
  1. Convert Certificate and Key (Private) into a keystore file