Dell-EMC certificate requirements

SSL communications with Dell-EMC require the installation of the following certificates in the IBM® Global Security Kit (GSKit) .kdb file that is used by the Content Manager OnDemand server.

To install the certificates:

1. Download the certificates from https://www.entrust.com/legal-compliance/entrust-certificate-services-repository/:
   • Entrust Root Certificate Authority - G2
   • Entrust Certificate Authority - L1K
2. Add the certificates individually.
   The following example adds the "Entrust Root Certificate Authority - G2" certificate to the key database named ondemand.kdb:

   gsk8capicmd_64 -cert -add -db "ondemand.kdb" -pw "myKeyDBpasswd" 
     -label "Entrust Root Certificate Authority - G2" -file "entrust.cer" 
     -format binary -fips 

3. Verify that the new certificate was stored in the key database by using GSKCapiCmd.
   The following example lists the certificates stored in ondemand.kdb:

   gsk8capicmd_64 -cert -list all -db "ondemand.kdb" -pw "myKeyDBpasswd"

   GSKCapiCmd displays the results which should now include the newly installed certificate:

   Certificates found
   * default, - personal, ! trusted, # secret key
   .
   .
   .
   !       "Entrust Root Certificate Authority - G2"
   .
   .
   .

   Repeat steps 2 and 3 as needed to add additional certificates to the key database.