Configuring Digital Certificates

Before configuring digital certificates, you must generate the private keys, CSR, and PEM file.

To configure digital certificates:

  1. Select PeopleTools, and then Security, and then Security Objects, and then Manage Digital Certificates.

  2. Click +.

  3. Select ROOTCA from the Type drop-down list box.

  4. Enter an alias name for the CA in Alias, and click Add Root.

    The Add Root Certificate dialog box appears.

  5. Open the ca.pem file.

    The root CA certificate is generated.

  6. Copy the contents of the ca.pem file, paste them into the Add Root Certificate dialog box, and click OK.

  7. Click +.

  8. Select Cert from the Type drop-down list box.

  9. Enter an alias name in Alias, such as PSFTCA.

  10. Click Add Root.

  11. Select the CA certificate alias of step 4 from the Issuer Alias lookup button.

  12. Click Request.

    The Request New Certificate dialog box appears.

  13. Complete the Common Name, Org Unit (organization unit), Organization, Locality, State/Province, Country, Algorithm, Key Size, Email Address, and Challenge Pswdfields.

    Note:

    The common name must be the machine name of the REN server machine, for example, PTA112.example.com, where PTA112 is the machine name and .example.com is the domain name.

  14. Click OK.

    The Certificates Signing Request dialog box appears.

  15. Copy and paste the text from the Certificates Signing Request dialog box, and save the text in a file named ren.csr in <PS_HOME>\appserv\<domain name>\.

  16. Click OK.

    The Import link appears.

  17. Submit ren.csr to the CA that issued the selected root certificate.

    The CA may send you the signed public key certificate by email or require you to download it from a specified web page.

  18. Open the saved certificate file in a text editor, and then highlight and copy its entire contents.

  19. Select PeopleTools, and then Security, and then Security Objects, and then Manage Digital Certificates.

  20. Click Import.

    The Import Certificate page appears.

  21. Paste the copied certificate content into the long edit box, and click OK.

See Integration Broker Administration: Implementing Node Authentication, Integration Broker Administration: Implementing Nonrepudiation.