Importing certificates in Maximo Application Suite

You can import certificates into Maximo® Application Suite. For example, Maximo Manage might integrate with external systems that contain self-signed certificates, such as Kafka or an SMTP server. You must give an alias to the certificate so that this name is used as the alias for this certificate when you add it to the truststore of Liberty.

About this task

The actual certificate must contain the -----BEGIN----- and -----END CERTIFICATE----- lines when you copy and paste the certificate itself. It must be in the PEM format. In a custom resource, the certificate content must be added in the crt property, and because it is multiline, you must add |. You can specify multiple certificates that each have a different alias.

Procedure

  1. Log in to Maximo Application Suite as a system administrator.
  2. On the Suite administration page, click Configurations.
  3. In the Other section, click the row where the external system that Maximo Manage is integrating with is displayed, for example, Apache Kafka.
  4. In the dialog, click the Edit icon.
  5. Click Add to add the certificate.
  6. Specify a certificate alias and paste the certificate content in PEM format.
  7. Click Confirm.
  8. Click Save.

    The following example shows a custom resource (CR).

    deployment:
    ...
    importedCerts:
        - alias: kafka
          crt: |
            -----BEGIN CERTIFICATE-----
            MIIDLTCCAhWgAwIBAgIJAIyuocAUfASaMA0GCSqGSIb3DQEBCwUAMC0xEzARBgNV
            BAoMCmlvLnN0cmltemkxFjAUBgNVBAMMDWNsdXN0ZXItY2EgdjAwHhcNMjEwNDAx
            MjIzMjUyWhcNMjIwNDAxMjIzMjUyWjAtMRMwEQYDVQQKDAppby5zdHJpbXppMRYw
            FAYDVQQDDA1jbHVzdGVyLWNhIHYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
            CgKCAQEAsGgoHx3zN5qJsO6L/fOr7az9eY3sHH1Ne9cZpe8awMtTQD35thL9sT8g
            ahStB0uhE/KbhFuZGcKT1Q8w3vJxaqSLeepTgfk9YWMF0lZbrOXbEg8v+apuvlLN
            a91EI46yuizcKUMLmA7WwqFlCHAaca68z5nkdPDf2BvB2Tmy1UkayjiDm9sPukUE
            qRxdWTw7ZOj8PSBt2KZP9xxyCmA6F7M7KuPr7OOwH+0291mAvzMmp1f/1bg2jw9e
            rz38jmcXrXVVx6I2otJHjTY+wRGEVWafP5vwEt4vNPXHtvi+e3w+HXAvGEstUJQo
            tzPf66+sFfXUI4sT80jJbPfMxrfPgwIDAQABo1AwTjAdBgNVHQ4EFgQU63t8rSXJ
            sJMojAY0wNEHJ/CkjaYwHwYDVR0jBBgwFoAU63t8rSXJsJMojAY0wNEHJ/CkjaYw
            DAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAFKEVmjYplFbM9pfYHpwk
            5+OlNnD3JaCCXDdpP3ccH5ABpxLsD0jf/cl2sUxEoxe+h1LnsxUBVnr6QuU4IIpe
            5OBT82SNZoJUl9w9Qp5IYeb2KF4oCbb80bejz6RXdJsuMk4pxKo1E1tIDYmuXZi7
            Wk8Np588ZHUdzka7dZklr9CtDLywuJGrHxc0t8R2wcqFvGAANG8vMMzuu3DTWk+d
            eMumY6m0Q/BnvPrIrRL1/45GvOv23G5oDLGLkSNmM3UIH+6q18z/vyN5D9K07xUn
            ThpsmIQVwXOiO79qcZxBAceMKlCTxwdMUTg2MfImTqc66/SAj/cIZEN+32OgxEnI
            ZA==
            -----END CERTIFICATE-----

        - alias: smtp
          crt: |
          -----BEGIN CERTIFICATE-----
            ...
          -----END CERTIFICATE-----