Complete these steps to create a new SSL configuration for a cluster of Sametime
® Gateway servers.
About this task
Secure Sockets Layer (SSL) configurations contain the attributes that you need to control the behavior of client and server SSL endpoints. You create a single SSL configuration to be used on the inbound and outbound trees in the configuration topology.
Expected state: the Deployment Manager and node agents are started. The servers are stopped.
Parent topic: Setting up SSL on a cluster
Previous topic: Receiving a signed certificate
Next topic: Obtaining the root certificate
- Using the Integrated Solutions Console, click Security -> SSL certificate and key management -> SSL Configurations.
- Click New to display the SSL configuration panel.
- Type name in the Name field for your SSL configuration.
- In the Trust store name drop-down list, replace the default CellDefaultKeyStore value with CellDefaultTrustStore. The truststore name refers to a specific truststore that holds signer certificates that validate the trust of certificates sent by remote connections during an SSL handshake.
- Select the keystore that you created from the Keystore name drop-down list. A keystore contains the personal certificates that represent a signer identity and the private key that WebSphere® Application Server uses to encrypt and sign data.
- Click Get certificate aliases.
- Select your certificate alias as the default server certificate alias.
- Select your certificate alias as the default client certificate alias.
- Click Apply, and then Save.
- Synchronize your changes to all nodes in the cluster. Click System Administration -> Nodes.
- Select all nodes in the cluster, then click Full Resynchronize.