Installing a self-signed SSL certificate
For the client machines that connect to your server using SSL, you must distribute the public part of the certificate to the clients so that it can be stored in their key databases. To do this, perform the following steps:
- Extract the public part to a file using the following command:
gsk<ver>capicmd[_64] -cert -extract -db <filename>.kdb -stashed -label <label> -format ascii -target mycert.arm
- Distribute mycert.arm to the clients. It should be copied to their jre/bin directory.
- Add the new certificate to the clients' key database using the following
command:
If prompted for a password, use:keytool -import -alias <label> -keystore ..\lib\security\cacerts -file mycert.arm
changeit
. The keytool is located in the <Modeler installation directory>\jre\bin directory (or in the <Modeler installation directory>/SPSSModeler.app/Contents/PlugIns/jre/Contents/Home/bin directory on Mac).