Importing CA-signed Database Server Certificates

Note: The CA-signed certificates for your database server must be provided to you by your system administrator.

Use the following commands to load CA-signed certificates for your IBM UDB database client wallet:

Server Certificate

gsk8capicmd_64 -cert -add -db <keystore_database_path>/<keystore_database_name> -pw <keystore_password> -file <server_certificate_location> -label <certificate_label>

Example:

gsk8capicmd_64 -cert -add -db “mydbclient.kdb” -pw “myClientPassw0rdpw0” -file C:\Users\sagautha\Desktop\aix_reg_certificates\slc18git.pem -label slc18git_SSL

Root Certificate

gsk8capicmd_64 -cert -add -db <keystore_database_path>/<keystore_database_name> -pw <keystore_password> -file <root_certificate_location> -label <certificate_label>

Example:

gsk8capicmd_64 -cert -add -db “mydbclient.kdb” -pw “myClientPassw0rdpw0” -file C:\Users\sagautha\Desktop\aix_reg_certificates\rootca_1.pem -label rootca_SSL

Intermediate Certificate

gsk8capicmd_64 -cert -add -db <keystore_database_path>/<keystore_database_name> -pw <keystore_password> -file <inter_certificate_location> -label <certificate_label>

Example:

gsk8capicmd_64 -cert -add -db “mydbclient.kdb” -pw “myClientPassw0rdpw0” -file C:\Users\sagautha\Desktop\aix_reg_certificates\interca.pem -label interca_SSL