Installing Alfresco Search Services introduces
additional features, including new sharding methods and sharding with SSL.
Mutual TLS is not just used to
encrypt data in transit, but mainly as an authentication mechanism between the repository and
It is possible to deploy Alfresco Community Edition
without mutual TLS between the repository and Search Services, however this
will expose internal APIs that give full access to the repository without authentication. In
such a setup, it is critical to properly protect these APIs.
You may choose to secure Alfresco Search Services with SSL.
When choosing to secure Search Services
with SSL, be aware that there is a known issue when using Solr 6
where the SSL truststore and
keystore passwords are visible as plain text in the Solr 6
process arguments. Alfresco
recommends that you ensure
the server running Solr 6
hardened and access is restricted to admin users only. For more information, see https://issues.apache.org/jira/browse/SOLR-8897
strongly recommends that you use firewalls and other infrastructure means to ensure that the
Search Services server
is not accessible from anything other than trusted hosts and/or users, and only on the ports
needed for Search Services.
Alfresco Search Services
all Alfresco Community Edition
201911 GA certified platforms and
You can download the Alfresco Search Services installation
file from the Alfresco Community Edition download page.