# Enabling the SSL encryption in Talend Runtime

Available in...

* Data Fabric
* Data Services Platform
* ESB
* Qlik Talend Cloud Enterprise Edition
* Qlik Talend Cloud Premium Edition
* Real-Time Big Data Platform

The execution servers provided by Qlik allows you to encrypt data prior to transmission via an existing SSL Keystore.

## Procedure

1. Go to the etc directory and open the org.talend.remote.jobserver.server.cfg file to edit it. Use the following parameters as a template:
   ```
   # ESB Runtime server SSL configuration
   org.talend.remote.server.ssl.keyStore=${keystoreFolder}/runtime-jobserver-server-keystore.p12
   org.talend.remote.server.ssl.keyStoreType=PKCS12
   org.talend.remote.server.ssl.keyStorePassword=${sslServerKeystorePassword}
   org.talend.remote.server.ssl.keyPassword=${sslServerKeystorePassword}
   org.talend.remote.server.ssl.trustStore=${keystoreFolder}/runtime-jobserver-server-truststore.p12
   org.talend.remote.server.ssl.trustStoreType=PKCS12
   org.talend.remote.server.ssl.trustStorePassword=${sslServerTruststorePassword}
   org.talend.remote.server.ssl.enabled.protocols=TLSv1.2,TLSv1.3
   ```
2. In theorg.talend.remote.jobserver.server.TalendJobServer.USE\_SSL=false line, replace false with true.

   The next time you launch your execution server, the SSL protocol will be used to secure the communication between servers and clients.
3. In Talend Administration Center, select the Use https check box to enable the encryption.
4. In <tac-installation>/apache-tomcat/bin/setenv.sh, extend the JAVA\_OPTS specification with the following settings:
   ```
   -Dorg.talend.remote.client.ssl.keyStore=${keystoreFolder}/runtime-client-keystore.p12
   -Dorg.talend.remote.client.ssl.keyStorePassword=${sslClientKeystorePassword}
   -Dorg.talend.remote.client.ssl.trustStore=${keystoreFolder}/runtime-client-truststore.p12
   -Dorg.talend.remote.client.ssl.trustStorePassword=${sslClientTruststorePassword}
   -Dorg.talend.remote.client.ssl.enabled.protocols=TLSv1.2,TLSv1.3
   ```

   Write this line as follows:
   ```
   export JAVA_OPTS="$JAVA_OPTS -Xmx2048m -Dfile.encoding=UTF-8 -Dorg.talend.remote.client.ssl.keyStore=..."
   ```