Configure SSL Between STA and RACF

StorageTek Tape Analytics Configuration Guide, Version 1.0.2

E28378-04

Table of Contents

Previous

Next

Index

Configuring STA Identity Management - RACF : Installing and Configuring STA’s RACF Authorization Facility : ▼ Configure SSL Between STA and RACF

▼	Configure SSL Between STA and RACF

1.	Install the required PTFs on the MVS system. These PTFs allow for authentication with RACF or other third-party security software when you are logging on to the STA.

•	ELS 7.0 - L1H16DH (MVS)

•	ELS 7.1 - L1H16DI (MVS)

•	ELS 7.2 - in the base code (MVS)

The Application Transparent TLS (AT-TLS) has been configured on MVS so that the port number defined to the SMC HTTP Server and WebLogic is encrypted to the server.

You possess two files: the MVS server certificate (in ASCII format) and the STA client private key (in binary PKCS12 format). The MVS system administrator has given you the password to the PKCS12 file.

2.	Using the Java keytool command, import the certificate file into the `/Oracle/Middleware/jdk1.6.0_xx/jre/lib/security/cacerts` file with the following command:


/Oracle/Middleware/jdkl1.6.0_`xx`/jre/bin/keytool -importcert -alias tbiServer -file `certificate` -keystore /Oracle/Middleware/jdk1.6.0_`xx`/jre/lib/security/cacerts -storetype jks

3.	Enter the password, and enter Yes to the Trust this certificate? prompt.

Note – The default password for the caerts file is "changeit." You must change this password. If you do not, you may be at risk of a security violation.


Enter keystore password:xxxxxxxxxx ... Trust this certificate? [no]: yes Certificate was added to keystore

4.	Place the private key file in `/opt/oracle/sta/etc`.

5.	Proceed to “Configure the WebLogic Server”.

Table of Contents

Previous

Next

Index

Link to documentation

Copyright © 2012, 2013 Oracle and/or its affiliates. All rights reserved.

Legal Notices