Importing a certificate for connections to services on IBM Cloud Pak for Data

On premises If you're integrating with Watson services on IBM Cloud Pak® for Data and you're using a self-signed certificate or an unknown CA certificate, you must import a certificate from IBM Cloud Pak for Data to the local truststore. The certificate is needed to build a secure connection between the OpenPages® application servers and the services that are running on IBM Cloud Pak for Data.

About this task

This task applies only when you're using a self-signed certificate or an unknown CA certificate in IBM Cloud Pak for Data.

Procedure

  1. Get the certificate from IBM Cloud Pak for Data and copy it to the OpenPages application server.
  2. Log on to the OpenPages application server.
  3. Import the certificate to WebSphere® Liberty by running the following command:
    keytool -importcert -v -alias <CERTIFICATE_ALIAS> -file <CERTIFICATE_NAME> -keystore <STORE_PATH> -storetype PKCS12 -storepass <STORE_PASSWORD>
    Where:
    • <CERTIFICATE_ALIAS> is the alias of the certificate that you received from IBM Cloud Pak for Data.
    • <CERTIFICATE_NAME> is the file name of the certificate.
    • <STORE_PATH> is the full path and file name of the truststore on the application server. For example: <OP_HOME>/wlp-usr/servers/<server_name>Server<#>/resources/security/key.p12
    • <STORE_PASSWORD> is the password of the truststore on the application server.

    For more information, see Adding trusted certificates in Liberty in the WebSphere Liberty documentation.

  4. Restart the OpenPages services.
  5. Repeat these steps on each application server.