Configuring the SSL connection between the Dispatcher and the Azure Active Directory domain

To enable communication between the adapter and the Azure Active Directory domain, you must configure keystores for the Dispatcher.

1. Open a browser.
2. Go to https://accounts.accesscontrol.windows.net
   Note: The Internet Explorer browser might return a HTTP 400 Bad Request message. You might be unable to view the SSL lock button. To correct this issue:

   1. On the browser, go to Tools > Internet Options and click the Advanced tab.
   2. In the Settings panel, locate the Show friendly HTTP error messages option under Browsing.
   3. Disable the Show friendly HTTP error messages option.
   4. Click Apply and then click OK to close the panel.
   5. Click the Refresh button to reload the link and display the SSL lock.
3. View the certificate.
   • Click SSL lock.
   • If your browser reports that revocation information is not available, click View Certificate.
4. Click Certification Path
5. Select the MSIT Machine Auth CA 2 certificate.
6. Export the certificate into a file that is encoded in the Base64 format.
7. If the Dispatcher already has a configured keystore, use the iKeyman Utility to import the MSIT Machine Auth CA 2 certificate. Complete the following steps:
   1. Navigate to the ITDI_HOME/jvm/jre/bin directory.
   2. Start the ikeyman.exe file.
   3. From the Key Database File menu, select Open.
   4. For the key database type, select JKS.
   5. Type the keystore file name: testadmin.jks.
   6. Type the location: ITDI_HOME/timsol/serverapi.
   7. Enter the password when prompted. The default password is administrator.
   8. Click Signer Certificates in the dropdown menu and click Add.
   9. Use Browse to select the downloaded or exported MSIT Machine Auth CA 2 certificate.
   10. Click OK to continue. The certificate is added in the certificate store.
   11. Restart the Dispatcher service and browser.
   For information about SSL configuration, see the Dispatcher Installation and Configuration Guide.