Friday, May 8, 2009

Know how to Retrieve a Signer Trust Certificate from a remote endpoint?

To rerieve a Signer Trust Certificate from a remote endpoint and save to RAD's local Key Store, you may use either:
Jython Administrative Scripts
RAD WAS WTE Admin Console as shown below.

Launch the WAS Administration Console


• Open the Navigation Menu Security folder on the left.
• Click SSL certificate and key management


  • Click Manage endpoint security configurations

  • Under Inbound -> [cellname] -> nodes
  • Click [nodename](NodeDefaultSSLSettings,null) (should be the upper link)


  • Click Key stores and certificates (on the far right)


  • Click NodeDefaultTrustStore (should be the 2nd link)


  • Click Signer certificates (on the far right)



  • Click the Retrieve from port button (in the upper area of the screen)


  • Supply the endpoint Host ( Web Service DNS alias)
  • Supply the endpoint Port (443)
  • Supply an endpoint Alias (anything you desire)
  • Click the Retrieve signer information button



  • Click OK


  • Verify the new certificate entry
  • Click Save (top of screen)


  • Logout of the Admin Console
  • Bounce the RAD WAS 6.1 WTE server



No comments:

Post a Comment