Note that the jvm. If you are using a keystore other than the default cacerts in the Java path being used by the AR System Server under \lib\security\cacerts, you need to add the following parameters to the nfig file in the ARSystem Install Directory: The above command will import the certificate into the cacerts where it will be available to use with AR server. Path2: path where you have copied the.Aliasname: alias name for the certificate to be installed, example: AREALDAP.Password: any password with which the keystore can be accessed, by default it is "changeit".Path1: Java path being used by the AR System Server under \lib\security\cacerts.Keytool –import –noprompt –trustcacerts –keystore -storepass “” –alias -file If you provide a value that does not correspond to an existing file, a new keystore will automatically be created Note: You can provide a -keystore value that is not an existing file if you want to use your own Java Key Store. You can use a 3rd party tool such as Key Store Explorer or the built-in keytool. This can be verified from the armonitor.cfg/nfĤ. These keystore and truststore files have to referred to in the HTTPs port that is used to access the API Gateway service. Verify which Java path is being used by the AR System server (example: C:\Program files\Java\jre\bin). To enable the two-way SSL for an API Gateway service, you must add a valid, authorized X.509 certificate along with the private key in a keystore file, and the certificate of the client or partner in the truststore file. Copy the certificate file to the AR Server in which you want to import it.ģ. Obtain a certificate from the LDAP, Exchange, or other server with which you want to establish an SSL/TLS connection, i.e. Steps to import the certificate to configure Remedy work with SSL or TLS protocol are as below:ġ. Use keytool (or any keystore tool) to import the certificate. Export the certificate from respective server.Ģ.
#Keystore explorer create truststore how to#
How to create keystore and import the certificate to configure Remedy with SSL/TLS?ġ.
Thus now Remedy can work with SSL or TLS.
Remedy works with TLS protocol since the time it has become a Java program in 9.0. Please refer to Article Number 000385088 for more information about troubleshooting BMC products in containers. This knowledge article may contain information that does not apply to version 21.05 or later which runs in a container environment.
0 kommentar(er)
