Hcl Connections on

Encrypt Customizer Traffic in HCL Connections Component Pack

christoph.stoettner@stoeps.de (Christoph Stoettner) — Thu, 16 Oct 2025 15:00:00 +0200

Warning

The is just a proof of concept and shouldn’t be used in production! I still have some issues with redirects to the new hostname.

In the series of encrypting network traffic within HCL Connections and Component Pack:

the customizer part is missing. In a default configuration (or when you install as documented), the traffic from IHS and NGINX that is forwarded to the customizer (mw-proxy) and Ingress is unencrypted.

Encrypt IHS proxypass traffic to Component Pack

christoph.stoettner@stoeps.de (Christoph Stoettner) — Fri, 23 May 2025 21:30:00 +0200

I’m still working on encrypting all network traffic between Connections and Component Pack servers. This time I checked the Ingress-Nginx Controller - TLS/HTTPS documentation.

The default configuration for connecting IHS with Component Pack uses the plain HTTP port 32080. All traffic like /social or the Tailored Experience wizard is routed from IHS to Kubernetes on port 32080.

Our target is to encrypt the traffic on port 32443.

Securing Redis Traffic in HCL Connections with SSH Tunnels

christoph.stoettner@stoeps.de (Christoph Stoettner) — Mon, 05 May 2025 22:00:00 +0200

At the moment I’m working with a customer to secure all traffic in HCL Connections. The target is to have only encrypted network traffic between servers.

Today I started enabling encryption to Redis. This is a documented process, but the documentation is outdated and incomplete.

Embed a video into Wikis or Blogs

christoph.stoettner@stoeps.de (Christoph Stoettner) — Wed, 30 Apr 2025 22:00:00 +0200

Today I read the article KB0118248 and remembered my blog post from 2018. I also checked the attached aha idea where a comment states that you can use iframe for Youtube. Despite what KB0118248 incorrectly states, it is absolutely possible to embed videos in HCL Connections blogs and wikis using the HTML video tag as demonstrated in this post.

Configure Kerberos / SPNEGO with Connections

christoph.stoettner@stoeps.de (Christoph Stoettner) — Sat, 26 Apr 2025 22:00:00 +0200

The HCL Connections documentation describes the process for configuring Windows desktop single-sign-on in a somewhat complicated way. Here are the necessary steps for setting up with the highest possible encryption.