Generating a truststore for the BPM event emitter

After you have enabled SSL for Kafka, you must also enable SSL on the event emitter side.

Before you begin

Get the Kafka server certificate.

About this task

To connect to a Kafka over SSL, the BPM event emitter relies on a dedicated truststore to hold the server certificate and a BPM emitter key-certificate pair is required to establish the SSL connection.

You do not need to create a keystore, you only create a truststore.

Procedure

Apply the following options to import your Kafka certificate file (kafka.pem in the following example) to a truststore named truststore.jks.

<Workflow_Install_Root>/java/bin/keytool[.exe]
  -importcert 
  -alias kafkaServer 
  -keystore truststore.jks 
  -file kafka.pem
  -noprompt