A.3 Importing the Adapter Certificate into Enterprise Manager

To import the adapter SSL certificate into the Enterprise Manager keystore:

  1. At the Service Manager web server system, extract the SSL certificate from the keystore into a certificate file using the RFC 1421 format.

    If you use the Java keytool -export_cert command to extract the certificate, the -rfc option stores the certificate in the correct format.

  2. Transfer the certificate file to the system where Enterprise Manager is installed.
  3. Append the contents of the certificate file to:
    $INSTANCE_HOME/sysman/config/b64LocalCertificate.txt
    
    • Only append the following lines to the b64LocalCertificate.txt file (that is, do not include blank lines or comments or any other special characters):

      -----BEGIN CERTIFICATE-----
      <<<Certificate in Base64 format>>>
      -----END CERTIFICATE-----
      
  4. Restart the OMS by entering the following commands:
    emctl stop oms
    emctl start oms
    

Note:

Do not run the emctl secure oms/agent command after adding the external certificate to the b64LocalCertificate.txt file. If you run the emctl secure command later, repeat steps 3 and 4 to make sure the external certificate exists in the b64certificate.txt file.