Installing Certificates for Local Node

Apart from the CA and REN server certificates, client authentication requires local node certificates, a client certificate for the browser, and a PSMCAPI certificate.

To install certificates for the local node:

  1. Select PeopleTools, and then Security, and then Security Objects, and then Manage Digital Certificates.

  2. Click +.

  3. Select Local Node from the Type drop-down list box.

  4. Enter the local node name in Alias, and click Add Root.

  5. Select the alias of the CA certificate from the Issuer Alias lookup button.

  6. Click Request.

  7. Complete the Common Name, Org Unit, Organization, Locality, State/Province, Country, Algorithm, Key Size, Email Address, and Challenge Pswd fields.

    Note:

    The common name must be the machine name of the REN server machine, for example, PTA112.example.com, where PTA112 is the machine name and .example.com is the domain name.

  8. Click OK.

    The Certificates Signing Request dialog box appears.

  9. Copy and paste the text from the Certificates Signing Request dialog box, and save the text in a file.

  10. Click OK.

    The Import link appears.

  11. To obtain your local node certificate, submit the certificate request text to the CA that issued the selected root certificate.

    The process of obtaining digital certificates varies, depending on the CA. Typically, a CA requires you to paste the content of the PEM-formatted CSR into a form that you submit online. The CA may send you the signed public key certificate by email or require you to download it from a specified web page.

  12. Open the saved certificate file in a text editor, and then highlight and copy its entire contents.

  13. Select PeopleTools, and then Security, and then Security Objects, and then Manage Digital Certificates.

  14. Click the Import link.

    The Import Certificate page appears.

  15. Paste the copied certificate content into the long edit box, and click OK.

See Integration Broker Administration: Implementing Node Authentication, Integration Broker Administration: Implementing Nonrepudiation.