Reconfigure the WebLogic Server to use a Different Security Certificate

▼	Reconfigure the WebLogic Server to use a Different Security Certificate

Caution – You must remember the WebLogic administration account usernames and passwords you establish in this procedure. If you forget the usernames or passwords, you must re-install STA.

1.	Point your browser to the WebLogic console login screen.

http://yourHostName:7001/console/

https://yourHostName:7002/console/

Note – Use the HTTP or HTTPS port number you selected during STA installation.

2.	Log in using the WebLogic Admin Console username and password you defined during STA installation.

3.	On the home page, select Servers.

4.	On the Summary of Servers page, select staServer.

5.	On the Settings for staServer screen, click the Keystores tab.

6.	Click Lock & Edit.

7.	On the Keystores screen, enter:

a.	the path and file of the private key file

b.	the Keystore Type

c.	the password supplied by the MVS system administrator

d.	the new password for the Java Standard Trust Keystore file (do not enter changeit).

Caution – You must remember the WebLogic administration account usernames and passwords you enter. If you forget the usernames or passwords, you must re-install STA.

8.	Click Save.

9.	Click the SSL secondary tab, enter the Private Key Alias and the password supplied by the MVS system programmer.

To determine the Private Key Alias, use the keytool command. For example:

C:\Temp>keytool -list -keystore CLTBI.PKCS12DR.D080411 -storetype PKCS12 Enter keystore password: (password from the MVS sysadmin) Keystore type: PKCS12 Keystore provider: SunJSSE Your keystore contains 1 entry tbiclient, Aug 17, 2011, PrivateKeyEntry, Certificate fingerprint (MD5): 9A:F7:D1:13:AE:9E:9C:47:55:83:75:3F:11:0C:BB:46

C:\Temp>keytool -list -keystore CLTBI.PKCS12DR.D080411 -storetype PKCS12
Enter keystore password: (password from the MVS sysadmin)
Keystore type: PKCS12
Keystore provider: SunJSSE

Your keystore contains 1 entry

tbiclient, Aug 17, 2011, PrivateKeyEntry,
Certificate fingerprint (MD5): 9A:F7:D1:13:AE:9E:9C:47:55:83:75:3F:11:0C:BB:46

10.

Select the Advanced link.

11.

Modify the following information:

a.	Select the Use Server Certs check box.

b.	From the Two Way Client Cert Behavior list, select Client Certs Requested and Enforced.

c.	Select Builtin SSL Validation and Cert Path Validators from both the Inbound Certification Validation and Outbound Certificate Validation lists.

12.

Click Save.

13.

Click Activate Changes.

14.

Stop and restart STA.


# STA stop Stopping the WebLogic staServer.... Successfully stopped the WebLogic staServer Stopping the WebLogic Administration Server.... Successfully stopped the WebLogic Administration Server Stopping the STA Database Server Backup Service (staservd).... Successfully stopped the STA Database Server Backup Service Stopping the STA database Server.... Successfully stopped the STA Database Server # STA start Starting STA Database.... Successfully started the STA Database Starting STA Database Backup Service (staservd).... Successfully started the STA Database Backup Service Starting WebLogic Administration Server.... Successfully started the WebLogic Administration Server Starting WebLogic staServer.... Successfully started the WebLogic staServer

15.

▼

Reconfigure the WebLogic Server to use a Different Security Certificate