Installing a self-signed SSL certificate

For the client machines that connect to your server using SSL, you must distribute the public part of the certificate to the clients so that it can be stored in their key databases. To do this, perform the following steps:

  1. Extract the public part to a file using the following command:
    gsk<ver>capicmd[_64] -cert -extract -db <filename>.kdb  -stashed -label <label>
        -format ascii -target mycert.arm
  2. Distribute mycert.arm to the clients. It should be copied to their jre/bin directory.
  3. Add the new certificate to the clients' key database using the following command:
    keytool -import -alias <label> -keystore ..\lib\security\cacerts -file mycert.arm
    If prompted for a password, use: changeit. The keytool is located in the <Modeler installation directory>\jre\bin directory (or in the <Modeler installation directory>/SPSSModeler.app/Contents/PlugIns/jre/Contents/Home/bin directory on Mac).