AppScan Central Platform
The AppScan Central Platform is the foundation of HCL AppScan 360°. It includes the browser-based user interface, APIs, and core server components. The AppScan Central Platform (ASCP) also requires the customer to provide an SQL Server DB and Active Directory (via LDAP).
Install options
Parameter | Use to... |
-installdb |
Create a new database or apply updates to an existing one. |
-reconfigure |
Re-read the configuration settings from the AppScan360.config file or install an update package. |
-sslpass |
Provide an SSL certificate password instead of providing it interactively during installation. |
SSL setting
AppScan 360° supports either a self-signed certificate (created automatically during installation) or a user-provided certificate.
Root CA certificate
ASCP installation creates a self-signed root CA certificate which is used to create internal certification for secure communication between ASCP and AppScan 360° Static Analysis. It encrypts all communication between ASCP and the various engines connected to it.
<installation_folder>\Certs\
To
see how to pass this certificate to AppScan 360° Static Analysis,
refer to Static analysis (SAST)Web application certificate
- Provide your organization’s SSL certificate for the AppScan 360° website. The supported certificate formats are PFX or Certificate and Key pair (PEM).
- If not provided by the user, a web application certificate is created automatically, installed on the IIS server and bound to all ports that use HTTPS.