Configuring Web Administration Tool with a JKS key database

Edit online

Configure Web Administration Tool with a JKS key database file to use Web Administration Tool for secure communication with a directory server instance.

Before you begin

To configure Web Administration Tool with a JKS key database, you must complete the following steps:

Create a JKS key database. For more information, see Creating a key database file with a self-signed certificate.
Install Web Administration Tool and WebSphere® Application Server. See Installing and Configuring section of the IBM® Verify Directory documentation.
Deploy Web Administration Tool in WebSphere Application Server. See Installing and Configuring section of the IBM Verify Directory documentation.

Procedure

Access a browser on your computer.
Enter the URL of Web Administration Tool.
The Web Administration Tool URL is in the following format: http://ip_address:12100/IDSWebApp.
On the Console administration login page, specify the following values:
1. In the User ID field, enter the console administrator user ID.
  The default value is superadmin. You must change the user ID value after login.
2. In the Password field, enter the password for console administrator user ID.
3. Click Login.
Click Console administration > Manage console properties.
On the Manage console properties wizard, click SSL key database.
On the SSL key database panel, complete the following steps:
1. In the Key database path and file name field, enter the JKS key database file name with path.
2. In the Key password field, enter the password for the JKS key database file.
3. In the Confirm password field, enter the password for the JKS key database file.
4. From the Key database file type list, select jks.
5. If the trust database details are same as the key database details, click Same as key database.
6. In the Trust database path and file name field, enter the JKS trust database file name with path.
7. In the Trust password field, enter the password for the JKS key database file.
8. In the Confirm password field, enter the password for the JKS key database file.
9. From the Trust database file type list, select jks.
10. To apply the changes, click OK.
On the Manage console properties wizard, click Manage security protocol.
To use a security protocol for secure communication with a directory server, click a protocol according to the security requirements of your organization.
The protocol value is set in the SSLContextAlgorithm entry in the idswebapp.properties file of the deployed Web Administration Tool profile.
To apply changes, click OK.
Click Logout.

What to do next

You must complete the following configuration:

Configure the application server that is associated Web Administration Tool to a security level as per the security requirements of your organization.
Add a directory server with its secure port and administration secure port in the Web Administration Tool console. See IBM Verify Directory documentation under the Administering section.