Digital Certificate Manager (DCM) enhancements (2025)

Content

• View certificate hierarchy to manage a certificate chain
  The ability to view a certificate hierarchy from the chosen certificate to the root certificate is available by selecting View Certificate Hierarchy button from a certificate’s action menu which displays the details of each certificate in the certificate chain.
  

• Selectively export a certificate with or without including associated private key
  Exporting a certificate with a private key creates a password protected PKCS#12 file containing the end-entity and issuer certificates along with the private key. If the private key is not required for this export action, unchecking the Include Private Key check box will export the certificate as a single Base64 certificate file.
  
   
• Improve add and remove certificate assignments with filter and actions
  Assigning a certificate to application definitions has been improved by adding an Assigned filter which shows the applications where the certificate is currently assigned.  There is also a Select All Assigned button which adds a checkmark to all applications that have the certificate assigned.  Selecting Remove will then remove the certificate from all applications that currently have that certificate assignment.
  
   
• Enable TLS to secure host server ports
  DCM has the ability to connect to secure host server ports when configured using the IBM Navigator for i interface.  From Serviceability -> Connection Properties, select TLS Connection and then the Digital Certificate Manager tab.  By enabling the TLS Enabled toggle, DCM will attempt a TLS connection to secure host server ports the next time ADMIN3 server instance is started.
  
  When using DCM with TLS enabled, the about page will show a read-only toggle stating secure host server connections are enabled.
  
   
• Support for Multi-Factor Authentication
  On systems enabled for MFA, an additional factor field is presented where the user can enter their time-based one-time password or other additional factor needed for authentication to the system.
  
   
• Add a show/hide eye-icon for login password field
  To ensure the entered value is the correct password, a user can click the eye-icon to display or hide their password on the login screen.