Creating SSL key files and certificates for Linux Installing on the Linux operating system Installing Performance Manager for Linux

The IBM WebSphere Application Server provides the ikeyman utility that manages Secure Sockets Layer (SSL) key files and certificates. For secure communication, you must create server key files with personal certificates. This procedure is only necessary if you chose to defer generating the SSL files and certificates during the MDM installation.

Steps

The Multiple Device Manager installation program gives you the option to defer creating the SSL certificate files until after the installation completes. If you selected that option during the installation, you will need to follow this procedure to create the files manually.

  1. Launch the ikeyman utility:
    1. Type the following command:
      <WAS-destination-directory>/WebSphere/AppServer/bin/ikeyman.sh

      where <WAS-destination-directory> is the directory where the WebSphere Application Server is installed on your system.

  2. Create the server SSL key file and certificate:
    1. Open the ikeyman utility and create a new JKS (Java Key Store) key file.
    2. Name the file: MDMServerKeyFile.jks
    3. Keep a record of all the passwords for these keys.
    4. Click Signer Certificates, and delete all of the JKS key files listed.
    5. Click Personal Certificates, and then create a new self-signed certificate.
    6. Enter the appropriate information for the new certificate. It is best to include as much information as you can.
  3. Create the server SSL trust file and certificate:
    1. Open the ikeyman utility and create a new JKS key file.
    2. Name the file: MDMServerTrustFile.jks
    3. Keep a record of all the passwords for these keys.
    4. Click Signer Certificates and delete all of the JKS key files listed.

(C) Copyright International Business Machines Corporation 2004