6.4 Importing the Web Service Certificate into Enterprise Manager

To import the OMU web service SSL certificate into the Enterprise Manager keystore:

1. Open a command prompt window and change the working directory to the adapters/conf directory in the OMU web service installation directory.

2. Issue the following command to extract the SSL certificate from the OMU web service keystore and place it in the OMUws.cer certificate file:

   • Unix platforms

     $JAVA_HOME/bin/keytool -exportcert -rfc -alias iwave -file OMUws.cer -keystore keystore.jks -storepass iwavepw
     

   • Windows platforms

     "%JAVA_HOME%\bin\keytool" -exportcert -rfc -alias iwave -file OMUws.cer -keystore keystore.jks -storepass iwavepw
     

3. Transfer the certificate file OMUws.cer to the system where Enterprise Manager is installed.

4. Append the contents of the OMUws.cer file to:

   $INSTANCE_HOME/sysman/config/b64LocalCertificate.txt
   

5. Ensure that only the following lines are appended to the b64LocalCertificate.txt file (that is, do not include blank lines, comments, or any other special characters):

   -----BEGIN CERTIFICATE-----
   <<<Certificate in Base64 format>>>
   -----END CERTIFICATE-----
   

6. Restart OMS by running the following commands:

   emctl stop oms
   emctl start oms
   

   Note:

   Do not run the emctl secure oms/agent command after adding the external certificate to the b64LocalCertificate.txt file. If you run the emctl secure command later, then repeat steps 4 through 6 to make sure the external certificate exists in the b64certificate.txt file.