You can install an Edge Encryption proxy manually or using the Edge Encryption interactive installer.

Java requirements

The host machine installing or running the Edge Encryption proxy server must maintain a supported version of Java. Current supported versions are:
  • Java 11.0.6 or later in the 11.x version series
  • Java 17.0.3 or later in the 17.x version series
Starting with the next release (Yokohama) only Java 17 will be supported. It is recommended to install Java 17 now to make future release upgrades easier.
Note: Java 8 is no longer be supported as of the Utah release. Upgrade your environment with the Edge Encryption proxy to Java 11 or 17 before you attempt to install the Xanadu version of the Edge Encryption proxy.

Installing the proxy server

Installing Edge Encryption includes these steps.
  • Install the Edge Encryption proxy application on a server in your network using the interactive installer or the manual installer.
  • Generate the RSA key pair for digitally signing encryption configurations and encryption rules.
  • Install the Java Cryptography Extension (JCE), if you plan to use AES 256 encryption.
  • If you are using a secure SSL connection, obtain a server certificate and import it to the Java KeyStore.
  • Set up your keystore and encryption key.
  • If order preserving encryption types or encryption patterns are to be used, set up a MySQL database on a machine in your network.
  • Set the desired properties. Properties are located in the edgeencryption.properties configuration file.
  • Specify that a proxy server is a trusted source so that Edge Encryption can process requests coming from that proxy server.

Accessing the proxy server

Once installation is complete, point each user's browser to an Edge Encryption proxy using the URL format: <host>:<port>. Values are determined by the host and port properties in the edgeencryption.properties file.

As an example with the following values:
Property Example value
edgeencryption.proxy.host hostname.mycompany.com
edgeencryption.proxy.http.port 8081
A client will access the proxy server using the following address: http://hostname.mycompany.com:8081/.
Note: DNS settings and routing rules may be used. Host and port values are determined by your network administrator.