1. Server Manager Installation Guide
  2. Import the Server Manager Console Certificate into All Java Installations That Are Used by Embedded Agents

Import the Server Manager Console Certificate into All Java Installations That Are Used by Embedded Agents

Caution:

As is true for the preceding procedure, you must perform these steps for all Server Manager Agent JDKs.

Using the principles shown preceding procedure, you must also import the Server Manager Console certificate into all Java installations that are used by embedded agents to communicate with the Server Manager Console. Specifically, the certificate needs to be imported for each of the following:

  • JDK used by WebLogic or WebSphere

  • JRE used by the Enterprise Server kernel processes.

    This is either the JRE specified in:

    • The JDE system directory. For example:

      <platform pack install location>/jdedwardsppack/e910/system/jre/

    • The value of InProcessJVMHome in the JDE.INI file.

Example: Importing the certificate into the JDK used by the embedded agent on the Enterprise Server:

  • If a value is assigned to InProcessJVMHome in the JDE.INI file on the Enterprise Server, you should import the certificate into the cacerts file of the JRE corresponding to the value of InProcessJVMHome. You can adapt instructions below to use the path to this JRE.

  • If no value is assigned to InProcessJVMHome in the JDE.INI file, you should import the certificate into the cacerts file of the JRE in the JDE system directory. For example, the directory might be named:

    <platform pack install location>/jdedwardsppack/e910/system/jre/

Below is an example command line to import a certificate (enter as a single contiguous line):

/opt/jdedwardsppack/e920/system/jre/bin/keytool -import -trustcacerts -keystore /opt/jdedwardsppack/e920/system/jre/lib/security/cacerts -storepass PASSWORD -noprompt -alias mynewcert -file

The above commands results in the new certificate being created as shown below:

/opt/jde_home_ent/SCFHA/jdk/jre/bin/mynewcertificate.cer

This example assumes the following:

  • Certificate password is PASSWORD

  • Path to the JRE is:

    /opt/jdedwardsppack/e920/system/jre

  • Path to the .cer file is:

    /opt/jde_home_ent/SCFHA/jdk/jre/bin/mynewcertificate.cer

Using the above example, for your installation you should edit the values accordingly.