IBM Support

How to load a new certificate into Secure+

Question & Answer


Question

In IBM Sterling Connect:Direct for UNIX, what is the best way to go about replacing an old key certificate (keycert) file, which is about to expire, with a new one?

Cause

This may be of interest to those needing to replace soon-to-expire certificates within Secure+ with new ones.

Answer

The best way to accomplish this would be to:


- Make sure your X environment is setup correctly. ( you should be able to run "xterm" or a similar X program)
- Start the Secure+ Admin tool.
- Double click the record of the node, the certificate of which needs to be updated.
- Select the TLS/SSL protocol tab.
- Use the browse button next to the 'Key Certificate file' field to browse to, and select, your new keycert file.
- Enter the private key passphrase when prompted, then click OK, and exit the Secure+ Admin Tool to apply your changes.

Should you need to, perhaps because of an issue with your new certificate for example, you can always repeat the above procedure to browse to your old keycert file until the issue with the new certificate has been resolved.

[{"Product":{"code":"SSKTYY","label":"IBM Sterling Connect:Direct for UNIX"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Maintenance","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"}],"Version":"3.8;4.0;4.1","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
24 July 2020

UID

swg21699183