Creating and configuring identity stores

An identity can group a collection of one or more certificates that can be used in IBM® Rational® Integration Tester to validate and authenticate connections that use SSL. After you create an identity store, you can use it to enable SSL communications in various messaging transports.

The underlying component of a Rational Integration Tester identity store is a Java™ KeyStore. You can use an existing keystore that was created by using the JDK tools, or you can create a keystore when you create an identity store.

Once created, the following certificate types can be imported into a Rational Integration Tester identity store:

Most commonly you would export certificates from your browser and then import the certificate file into a Rational Integration Tester identity store. These certificates can then be used to verify the chain of trust from any certificate that a server sends to the Rational Integration Tester client connection.

Note: A client's identity can be created only by using the JDK tool. The identity is created against a keystore that can then be used to identify one end of an SSL connection.

Creating an identity store

Identity stores are created in the Physical View of IBM Rational Integration Tester’s Architecture School perspective. You can create an identity store in one of two ways:

The new identity store is created under the Unconnected Resources in the Physical View.

Configuring an identity store

Follow the steps to configure a new or existing identity store in IBM Rational Integration Tester.

  1. Double-click the wanted identity store in the Physical View of Architecture School.

    The Identity Store editor is displayed.

  2. Click Select to locate and open an existing Java keystore (.jks) file. When prompted, enter the keystore password.
  3. To create a keystore with Rational Integration Tester, click New and select the location and name of the new keystore.
  4. Click Import Certificate(s) to import a certificate into the selected keystore, then locate and open the wanted certificate file.
  5. To export an existing certificate (if it can be exported), select it and click Export Certificate.
  6. To delete a certificate from the keystore, select it and click Delete.

Feedback