Change IPP Checkin to IPPS

---

The seal-ipp-checkin service supports both IPP and IPPS. By default, the service listens to the port 631 and uses IPP, that means ipp://:631. With IPPS, the port 443 is used.

---

This is how you change the seal-ipp-checkin service to IPPS:

1. Set the SERVICE_URL key for the seal-ipp-checkin service to ipps://:443. If you want the IPP checkin to listen on both the IPP and the IPPS port, set SERVICE_URL to ipp://:631 ipps://:443 for the seal-ipp-checkin service.

   Hint - configuration path

   In Consul, the key is specified with dc/home/env/service/checkin/tag/ipp/SERVICE_URL.

2. When configuring the key via Consul, the seal-ipp-checkin service will be restarted automatically.

   Hint - certificate only for the seal-ipp-checkin service

   It is not always possible to change the TLS certificates for all services as the internal communication uses server names different from the FQDNs of the servers, refer to Secure the Output Engine Services. However, you can tell only the seal-ipp-checkin service to use a provided certificate without changing the certificates for the other services. For this, set the dc/home/env/service/checkin/tag/ipp/TLS_DIR key to the directory that contains the key.pem and cert.pem files to be used by the seal-ipp-checkin service.

---