For the Connections server to connect to Microsoft Exchange mail servers or Lotus Domino mail servers with self-signed certificates, you must import SSL certificates.
Parent topic: Preparing to install IBM Connections Mail
For Exchange servers
Use the keytool utility to import an SSL certificate into the cacerts keystore. Import the server’s SSL certificate into the cacerts keystore on the Connections server.
About this task
The keytool utility is in the path_to_WebSphere/WebSphere/AppServer/java/jre/bin
directory. If this directory is not in the root user's PATH, then run the keytool utility by using the full path.
- Export the Lotus® Domino® or Microsoft Exchange SSL certificate to a file. To export, access the server from a browser and see the browser help for further instructions.
- Copy the certificate file to any location on the Connections server.
- On the Connections server, enter: cd path_to_WebSphere/WebSphere/AppServer/java/jre/lib/security
- Import the certificate into the keystore.
keytool -import -alias KeyAlias -file path_to_certificate_file -keystore cacerts -storepass changeit
- Windows: C:\IBM\WebSphere\AppServer\java\jre\bin\keytool -import -alias ExchangeCert -file c:\tmp\ExchangeCert.cer -keystore cacerts -storepass changeit
- Linux: /opt/IBM/WebSphere/AppServer/java/jre/bin/keytool -import -alias ExchangeCert -file /tmp/ExchangeCert.cer -keystore cacerts -storepass changeit
- These file paths are examples and may not exist on your server.
- The key alias can be any string that makes sense for the server configuration.
- changeit is the default password for cacerts.
For Domino servers
This is required only for Lotus Domino servers that use self-signed certificates.
- In the WebSphere Application Server administrator console, click Security -> SSL certificate and key management -> Key stores and certificates -> Cell Default trust store -> Signer certificates.
- Click Retrieve from port.
- Enter the URL of the server.
- Click Save. Click Save. Click Sync.
- Restart all Java virtual machines.