Installing a security certificate for Publishing Document Builder

You must install a security certificate for the server that runs Publishing Document Builder. You can replace the self-signed certificate with a certificate that belongs to your company.

About this task

Note: You must at least start and stop the server one time for the server files including the server.xml file to be generated under the Document_Builder_install_dir/server/liberty/servers/clm directory.
Note: The IBM® JRE that is included with Publishing Document Builder includes an IBM tool that is useful for managing keys on the server. The keytool program is in the Document_Builder_install_dir/server/jre/bin/ directory.

Installing a self-signed certificate with a certificate that belongs to your company

Before you begin

It is assumed that you generated the server files including the server.xml file to be under the Document_Builder_install_dir/server/liberty/servers/clm directory, as described in About this task on the page.

Procedure

  • Configure WebSphere Liberty security certificate:
    In the Document_Builder_install_dir/server/liberty/servers/clm/server.xml file, Liberty is configured to read the server certificate from the Document_Builder_install_dir/server/liberty/servers/clm/resources/security/ibm-team-ssl.p12 file. The default keystore password is set to ibm-team. This keystore includes a self-signed certificate that identifies the server as localhost.
    Note: To improve security, change the default keystore password.

    You can use the keytool program, as mentioned in the About this task on the page, to help you create your own self-signed certificate that identifies the host by its network name. Alternatively, you can request a certificate that is signed by a trusted certificate authority (CA). A self-signed certificate requires acceptance by the Engineering Workflow Management client or web browser.

    To use your own certificate file with Liberty, open Document_Builder_install_dir/server/liberty/servers/clm/server.xml with a text editor and edit the entries in the following line: 
    <keyStore id="defaultKeyStore" password="{xor}Nj0ycis6PjI=" type="PKCS12" location="ibm-team-ssl.p12"/>

    For more information about the keytool program, see keytool - Key and Certificate program.

    For information about creating a self-signed certificate and keystore configuration, see Enabling SSL communication in Liberty.

  • Configure a Jazz® Authorization Server security certificate.

    For information about creating a self-signed certificate and keystore configuration on Jazz Authorization Server, see Enabling SSL communication for the WebSphere Liberty.