I want to import a certificate into the Java truststore on websphere however I don't know where is the correct location to do so. The most obvious location to me is under
instance/was/INSTANCE1/java/jre/lib security
however i see in my Administration console that the default truststore is under
/instance/was/INSTANCE1/profiles/base/config/cells/nd_cellname
Now i've tried adding to the first location under the jre security folder but to no avail. The problem with the location under the cell name is taht the truststore is a .p12 file and my certificate is a .cer file. How can i import? Thanks
WebSphere® Application Server uses the certificates that reside in keystores to establish trust for a Secure Sockets Layer (SSL) connection.
Open the IBM® WebSphere® Application Server administrative console. Select Security > SSL certificate and key management. Select Key stores and certificates > NodeDefaultTrustStore. Select Personal certificates and click Import.
To check an SSL certificate on any website, all you need to do is follow two simple steps. First, check if the URL of the website begins with HTTPS, where S indicates it has an SSL certificate. Second, click on the padlock icon on the address bar to check all the detailed information related to the certificate.
In the SSL basic authentication scheme, the server authenticates the client by challenging the client for a user ID and password or password phrase. For clients, you must create a key ring and attach to it the CA certificate from the certificate authority that issued the server's certificate.
You can import a certificate in Websphere in two ways:
Go to Security > SSL certificate and key management > Key stores and certificates > CellDefaultTrustStore > Signer certificates > Add > Set the full path to certificate in File Name field).
You can also retrieve the certificate directly from the remote SSL port by using the "Retrieve from Port" choice.
Using the iKeyman X11 application which is in the WAS_ROOT/bin directory.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With