When an IBM® Security Directory Integrator component is used as a client (for example the LDAP Connector) SSL mandates that a truststore to be used by IBM Security Directory Integrator must be defined. For information on keystores and truststores, see the guide at http://download.oracle.com/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html
The following steps are required to enable SSL support for IBM Security Directory Integrator as a client:
# Keystore file information for the server TDI authentication.
# It is used to provide the public key of the TDI to the SSL enabled client.
# javax.net.ssl.keyStore=D:\test\clientStore.jks
# javax.net.ssl.keyStorePassword=secret
# javax.net.ssl.keyStoreType=jks