Storing a CA certificate

Edit online
Note: From V15 release onwards, support for Certificate Management Utility has been removed. For more information, please refer to IBM Host On-Demand v15 Certificate Management Utility Removal.
For Windows platforms, for example, to store a certificate from a CA who is not a trusted CA, enter the following command: 
java com.ibm.gsk.ikeyman.ikeycmd -cert -add
-db your_install_directory\bin\HODServerKeyDb.kdb
-pw <password> -label <label> -format <ascii | binary>
-trust <enable |disable> -file <file>
where your_install_directory is your Host On-Demand installation directory.

Note the following descriptions:

  • -label: Label attached to certificate or certificate request
  • -format: Certificate Authorities might supply a binary ASCII file
  • -trust: Indicate whether this CA can be trusted. This should be Yes.
top Graphic Image
 You need to stop and restart the Host On-Demand Service Manager after doing this.