A Certificate Authority (CA) creates a certificate from a certificate request. WebSphere
® Application Server keystore receives the certificate from the CA and generates a CA-signed personal certificate that your Sametime
® Gateway cluster can use for Secure Sockets Layer (SSL) security.
Before you begin
The keystore must contain the certificate request that was created and sent to the Certificate Authority. Also, the keystore must be able to access the certificate that is returned by the Certificate Authority.
Expected state: the Deployment Manager and the node agents are started. The servers are stopped.
Application Server creates the certificate chain when the signed certificate is received. The chain is constructed from the signer certificates that are in the keystore at the time the certificate is received. Be sure to import all intermediate certificates as signer certificates into the keystore before receiving the CA-signed certificate.
- Log in to the Integrated Solutions Console.
- Click Security -> SSL certificate and key management -> Key stores and certificates.
- Click the keystore that you created previously.
- Click Personal certificates.
- Click Receive a certificate from a certificate authority.
- Type the full path and name of the certificate file generated by the CA.
- Select the appropriate data from the list.
- Click Apply and Save.
What to do next
Now you are ready to define a new SSL configuration.
Parent topic: Setting up SSL on a cluster
Previous topic: Importing intermediate CA certificates into the keystore
Next topic: Defining the SSL configuration for a cluster