Replace the Factory Certificate with a Common Certificate on UNIX or Linux

Edit online

About this task

To replace the factory certificate used between the engine and CM on UNIX or Linux:

Procedure

  1. Stop CM.
    1. At CM, navigate to the install_dir/bin directory, where install_dir is the installation directory, and type the following command:
      ./stopCM.sh
    2. At the passphrase prompt, type the passphrase defined for the engine and press Enter.
    3. Type the user name and password for the administrator.
  2. Type the following command to replace the factory certificate:
    ./configureCmSsl.sh -u commonCert=<cert file> commonCertAlias=<alias>
    where:
    • <cert file> is the path and file name to the certificate that replaces the factory certificate.
    • <alias> is an alias name for the new certificate. This can be any value other than factory. If you do not specify an alias, common is assigned as the default.
  3. Type the following command to create an export file of the certificate store:
    ./configureCmSsl.sh -e file=<export file>

    where <export file> is the path and file for the export file.

  4. Copy the file you created in step 3 to the engine.
  5. Stop the engine.
    1. At the engine, navigate to the install_dir/bin directory and type the following command:

      ./stopEngine.sh

    2. Type the passphrase defined for the engine and press Enter.
  6. At the engine, navigate to the install_dir/bin directory and type the following command to import the certificate store created in step 3:
    ./configureEngineSsl.sh -i file=<export file> engCertAlias=<alias>
    where:
    • <export file> is the path and file for the export file.
    • <alias> is the alias name for the new certificate assigned in step 2
  7. Start the engine.
    1. From install_dir/bin, type the following command:

      ./startEngine.sh

    2. At the passphrase prompt, type the passphrase for the engine and press Enter.
  8. Start CM.
    1. Navigate to the install_dir/bin directory and type the following command:

      ./startCM.sh

    2. At the passphrase prompt, type the passphrase defined for CM and press Enter.