Import Server Manager Console Certificate into the Server Manager Agent Truststore/Keystore

To import the Server Manager Console Certificate into the Server Manager Agent Truststore/Keystore:

Caution: You must perform these steps for all Server Manager Agent JDKs.
  1. Export the Server Manager Console Certificate to a file using these steps:

    1. From the browser click the lock icon on the left hand side of the URL of the HTTPS/SSL based Server Manager Console URL.

    2. Click on Certificate Information.

    3. Go to details tab and select the Copy to File option.

    4. Click Next.

    5. Select DER encoded binary X.509 (.CER) format.

    6. Click Next.

    7. Enter file information.

    8. I have given the name as SMC_Certificate.cer.

    9. Click Next.

    10. Click Finish.

    11. You will get a message saying “Export is Successful".

    12. You can view the Certificate in the path given in the above step.

  2. This Certificate needs to be imported into the Truststore/Keystore of each of the Server Manager Agents (cacerts file of X:\jde_home_1\SCFHA\jdk\jre\lib\security\cacerts file).

  3. Before performing the import, backup the cacerts file located at X:\jde_home_1\SCFHA\jdk\jre\lib\security\cacerts file.

  4. Below is the command to import the Certificate file on Windows Platform. A similar step needs to be done for the Linux/UNIX/AS400 platforms and also for Server Manager Agents installed on these platforms.Import the Certificate using the command below. When prompted for whether you trust the Certificate, answer Yes.

    X:\jde_home_1\SCFHA\jdk\jre\bin\keytool -import -alias smc_cert -file C:\SMC_Certificate.cer -keystore

    X:\jde_home_1\SCFHA\jdk\jre\lib\security\cacerts -storepass password

    This image is described in the surrounding text.
  5. After this step, restart the Server Manager Agent. This step needs to be done on each of the Server Manager Agent machines. Without this step the Server Manager Agent may not be able to communicate with the Server Manager Console.

  6. Next, login into the Server Manager Console and ensure that above Server Manager Agent is showing up with a Running Status.

    On WLS:

    This image is described in the surrounding text.

    On WAS:

    This image is described in the surrounding text.

This completes the configuration required for running the Server Manager Console on WebLogic/WebSphere with HTTPS/SSL Enabled and completes the importing of the Certificate on the Server Manager Agents.