Importing SSL certificate into the local truststore file for WebSphere Application Server Liberty Profile

If you want to use workflow with WebSphere® Application Server Liberty Profile, you must import the InfoSphere® Information Server SSL certificate into the local truststore file.

About this task

Note: The procedure is applicable only when you use WebSphere Application Server Liberty Profile.

If you use a non-trusted SSL certificate, for example a self-signed certificate, you need to export it and then import it to the local truststore file. This is required for a successful internal communication between InfoSphere Information Server components when you want to use the workflow feature.

Procedure

  1. Go to the /opt/IBM/InformationServer/wlp/usr/servers/iis location.
  2. Export InfoSphere Information Server SSL certificate by running the following command:
    /opt/IBM/InformationServer/jdk/bin/keytool -export -alias iisssl -keystore resources/security/iis-server-keystore.p12 -rfc -file resources/security/iis-server.cert -storetype PKCS12

    You need to provide a password. By default, the password is iiskeypass. If it's incorrect, it might have been changed in InfoSphere Information Server installer.

  3. Import the exported certificate to the truststore file by running the following command:
    /opt/IBM/InformationServer/jdk/bin/keytool -importcert -alias iis-server -file resources/security/iis-server.cert -keystore resources/security/iis-server-truststore.jks
  4. Restart the server. Go to the /opt/IBM/InformationServer/wlp/bin location and run the following commands:
    ./server stop iis
    ./server start iis