S1: Adding WebSphere Application Server certificates to the IBM HTTP Server SSL key  |
|
To import a public WebSphere® Application Server certificate into the IBM® HTTP Server plug-in, follow these steps:
- Copy the plugin-key.kdb file from the following directory on the Web server machine:
C:\IBM\HTTPServer\Plugins\config\webserver1
to the following directory on the deployment manager machine:
C:\IBM\WebSphere\AppServer\profiles\Dmgr01\config\cells\@nowiki@1cell_name>\nodes\@nowiki@2node_name>\servers\@nowiki@3webserver_name>
- Log in to the IBM WebSphere Application Server Integrated Solutions Console and select Security > SSL Certificate and key management > Key stores and certificates.
- Click CellDefaultTrustStore.
- Click Signer Certificates.
- Select the check box next to the certificate that you want to extract. You probably have several options, such as default_1, default_2, to default_n , and so on. When you have selected a certificate, click Extract.
Note: The number of certificates that you should extract depends on the number of nodes in your deployment. Extract one certificate per node.
- Enter a fully-qualified Certificate file name. If you do not specify a directory path, the certificate is stored in the app_server_root/profiles/@nowiki@4profile_name>/etc directory, where @nowiki@5profile_name> is the name of the current WebSphere Application Server profile.
- Click OK to extract the file.
- Repeat steps 4-7 for each managed node."
- In the IBM WebSphere Application Server Integrated Solutions Console, select Servers > Web servers.
- Click @nowiki@6Webserver_name>, where @nowiki@7Webserver_name> is the name of your IBM HTTP Server Web server.
- Click Plug-in properties and then click Manage keys and certificates.
- Under Additional Properties, click Signer certificates, and then click Add.
- Enter the certificate alias and its fully-qualified file name, and click OK.
- Click Save to import the file.
- Repeat steps 11-14 for each managed node.
- In the IBM WebSphere Application Server Integrated Solutions Console, select Servers > Web servers > Plug-in properties.
- From the Plug-in properties page, click Copy to Web server key store directory to synchronize the KDB file with the IBM HTTP Server.
- Restart the IBM HTTP Server to apply the changes.
|
Table of Contents:
Lotus Connections 2.5 network deployment scenario |
|
|
|
|
| Version 4 |
January 26, 2010 |
11:37:09 PM |
by Dana Liburdi  |
|
|