Mutual Authentication with Anypoint Platform
|
Mutual authentication for connectivity between Runtime Fabric and the Anypoint Platform control plane is enabled by default for Runtime Fabric versions 1.6.45 and later. The following instructions to enable mutual authentication apply only to those versions earlier than 1.6.45. |
Mutual authentication improves the security of communication between Runtime Fabric and Anypoint Platform and is highly recommended.
For Runtime Fabric versions earlier than 1.6.45, enable mutual authentication using the Runtime Fabric API. For Runtime Fabric versions 1.3.60 and later, use Runtime Manager to enable it.
Before You Begin
Before enabling mutual authentication, verify the following endpoint and port are reachable from all Runtime Fabric controller and worker nodes:
-
US control plane:
-
configuration-resolver.prod.cloudhub.io:443
-
-
EU control plane:
-
configuration-resolver.prod-eu.msap.io:443
-
Failure to meet these requirements before enabling mutual authentication results in errors with creating and managing application deployments on Runtime Fabric.
You can use the latest version of the rtfctl utility to validate that all required endpoints are reachable from each Runtime Fabric controller node:
cd /opt/anypoint/runtimefabric ./rtfctl update ./rtfctl test outbound-network --mutual-tls-check
Enable Mutual Authentication from Runtime Manager
-
From Runtime Manager, select the appropriate environment and click Runtime Fabrics.
-
Select a Runtime Fabric.
-
For Enable mutual authentication with Anypoint Platform connectivity, set the toggle to On.
Enable Mutual Authentication using the Runtime Fabric API
From a Runtime Fabric workstation, run the following cURL command:
curl --location --request PATCH 'https://[eu1]anypoint.mulesoft.com/runtimefabric/api/organizations/<ORG-ID>/fabrics/<RUNTIME-FABRIC-ID>' --header 'Content-Type: application/json' --header 'Authorization: Bearer <TOKEN>' --data-raw '{"features": {"enhancedSecurity": true}}'
Replace these placeholders with your unique values:
-
<ORG-ID>
-
<RUNTIME-FABRIC-ID>
-
<TOKEN>