IBM Support

Heritage Digital Certificate Manager Enable and Disable Instructions

How To


Summary

The heritage Digital Certificate Manager is no longer started by default on IBM i 7.5, 7.4, and 7.3. If you have a requirement to access the heritage Digital Certificate Manager, follow the instructions on this page.

Objective

The heritage Digital Certificate Manager (DCM) version is no longer started by default. PTFs for IBM HTTP Server for i removed the statements for DCM from the configuration file. Therefore, it is recommended to use the newer IBM Digital Certificate Manager for i user interface with URL http://systemname:2001/dcm.
If there is a requirement to re-enable heritage DCM, add content to the admin-cust.conf configuration file.

Steps

Update the configuration file:
  • Add the Digital Certificate Manager content to configuration file:
    '/QIBM/UserData/HTTPA/admin/conf/admin-cust.conf'
     
#---------------------------------------
# Digital Certificate Manager content start
#---------------------------------------
Alias /QIBM/ICSS/Cert/Admin/ /QSYS.LIB/QSYSCGI.LIB/DB2WWW.PGM/QIBM/ProdData/HTTP/Protect/ICSS/Cert/Macro/
Alias /QIBM/ICSS/Cert/Download/ /QIBM/UserData/ICSS/Cert/Download/
Alias /QIBM/ICSS/Cert/ /QIBM/ProdData/HTTP/Protect/ICSS/Cert/HTML/
<Directory /QIBM/UserData/ICSS/Cert/Download>
  AuthName "HTTP Admin"
  AuthType Basic
  PasswdFile %%SYSTEM%%
  UserID %%CLIENT%%
  Require valid-user
  AddType application/x-x509-ca-cert cacrt
  AddType application/x-x509-user-cert usrcrt
</Directory>
<Directory /QIBM/ProdData/HTTP/Protect/ICSS/Cert/HTML>
  AuthName "HTTP Admin"
  AuthType Basic
  PasswdFile %%SYSTEM%%
  UserID %%CLIENT%%
  Require valid-user
</Directory>
#---------------------------------------
# Digital Certificate Manager content end
#---------------------------------------
Restart the HTTP Admin Servers:
  • ENDTCPSVR SERVER(*HTTP) HTTPSVR(*ADMIN)
  • Wait until the HTTP Admin servers are ended.
  • STRTCPSVR SERVER(*HTTP) HTTPSVR(*ADMIN)

Additional Information

Digital Certificate Manager can be disabled again by removing the Digital Certificate Manager content from the admin-cust.conf configuration file and restarting the HTTP Admin servers.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSB23CE","label":"IBM i 7.5 Preventative Service Planning"},"ARM Category":[{"code":"a8m0z0000000CSxAAM","label":"Digital Certificate Manager-\u003EFAQs"}],"ARM Case Number":"","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.5.0"},{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SS9QQS","label":"IBM i 7.4 Preventative Service Planning"},"ARM Category":[{"code":"a8m0z0000000CSxAAM","label":"Digital Certificate Manager-\u003EFAQs"}],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.4.0"},{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSTS2D","label":"IBM i 7.3 Preventative Service Planning"},"ARM Category":[{"code":"a8m0z0000000CSxAAM","label":"Digital Certificate Manager-\u003EFAQs"}],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.3.0"}]

Document Information

Modified date:
14 December 2022

UID

ibm16837767

Page Feedback