To ensure that your JMP Server instance communicates securely with other servers in your network, you must configure your JMP Server instance to use TLS certificates that a valid Certificate Authority (CA) signed. To enhance the secure connections, you can also optionally change the default cipher suites that other servers accept and propose when communicating with your JMP Server instance.

By default, the JMP Server installer installs a self-signed TLS server certificate for the JMP Server instance you installed. You can use the default certificate for testing purposes. If you are using the JMP Server instance in a production environment, you must replace the default certificate with a CA-signed TLS server certificate as soon as possible. Use of certificates that a CA did not sign can allow untrusted parties to intercept traffic by masquerading as your server. See Overview of Tasks for Setting Up TLS Certificates for JMP Server.