IBM Tivoli Netcool/OMNIbus, Version 7.4

Replacing the default SSL certificate with a certificate signed by a Certificate Authority

Use this procedure to replace the default certificate with a certificate signed that is by a Certificate Authority (CA).

  1. Creating a request for the certificate
    As the first step of replacing the default SSL certificate, create a request for the certificate from the Certification Authority (CA) so that it can be sent to the CA.
  2. Obtaining the certificate from the Certification Authority
    Apply to your chosen Certification Authority for the certificate, typically by using their website. When you are asked to supply the request, use the complete contents of the certificate request file. This is the file tip_home_dir/profiles/TIPProfile/config/cells/TIPCell/nodes/ca_request_file_name.p12. Replace ca_request_file_name with the name of the file that contains the certificate request.
  3. Receiving the certificate
    Receive the certificate that you obtained from the CA:
  4. Adding the signer certificate to the store
    Add the signer certificate to the keystore so that it is recognized as a valid certificate.
  5. Activating the SSL certificate
    Activate the certificate before it can be used for authentication.
Parent topic: Replacing the default SSL certificate for connections to Web GUI clients