Configuring client certificates

When SPSS® Statistics Server is configured to use an SSL connection, and you are using a self-signed certificate, you must copy and configure the trusted certificate authority to all client workstations.

An example would be when IBM® SPSS Collaboration and Deployment Services submits a job to SPSS Statistics Server (which is SSL enabled). In this situation, IBM SPSS Collaboration and Deployment Services is the client. The trusted certificate authority (root.pem on the SPSS Statistics Server) should be copied to and configured on all IBM SPSS Collaboration and Deployment Services machines.

Configuring certificate files for IBM SPSS Collaboration and Deployment Services

IBM SPSS Collaboration and Deployment Services support can be deployed on a Web Application Server (for example, IBM WebSphere and RedHat JBoss EAP).

The first step in configuring certificate files for IBM SPSS Collaboration and Deployment Services support is to retrieve the SPSS Statistics Server root.pem file from your administrator.

The SSL certificate configuration process depends on which Web Application Server is employed.

IBM WebSphere and RedHat JBoss EAP

The following instruction apply to both IBM WebSphere and RedHat JBoss EAP.

RedHat JBoss EAP note: When the SPSS Statistics Server uses IBM GSKit SSL, you must use the IBM JDK when configuring IBM SPSS Collaboration and Deployment Services on JBoss EAP.
  1. Distribute the root.pem file to the IBM SPSS Collaboration and Deployment Services Server machine. If you have multiple trusted certificate authorities, copy them into a single root.pem file (trusted certificate authorities are text files, so you can copy and paste the certificates) Copy root.pem to the following location on the IBM SPSS Collaboration and Deployment Services Server.

    If you have already copied a root.pem file to the client for another IBM product, append the trusted root certificate authority information from your authority to the existing root.pem file. Create an SSL_CERT_DIR environment variable and set the variable's value to the desired server location that contains the root.pem file.

  2. Verify that IBM SPSS Collaboration and Deployment Services Server user adds the SSL_CERT_DIR environment variable.
    Note: The IBM SPSS Collaboration and Deployment Services Server must be restarted after adding the environment variable.