Installing Digital Certificates

Digital certificates are required to provide client and server authentication in Real-time Event Notification (REN) server using SSL. A digital certificate is an electronic means of establishing your credentials for web or business transactions that are issued by a certification authority (CA). The CA is a trusted third party who signs and issues the certificates for users after verifying their authentication using secure means.

The Installing for REN SSL topic presents a sample way of installing and configuring REN using SSL. PeopleSoft customers may have their own means of obtaining and installing for REN server with SSL enabled.

This section outlines the basic steps to install. Before installing, you must create the application server domain.

Note:

The application server domain must have write permissions. All certificates are stored under <PS_HOME>/appserv/<domain name>. The cacerts file has write permissions under <PS_HOME>/JRE/lib/security.

The following overview lists the steps that are required to install. The subsequent sections describe each step in detail.

To install and configure REN SSL:

  1. Install the CA server certificate.

    See Installing the CA Server Certificate.

  2. Install the REN server certificate.

    See Installing the REN Server Certificate.

  3. Configure .

    See Configuring Digital Certificates.

  4. Import certificates into the Java keystore for any REN Java Clients.

    See Importing Certificates in Java Keystore for REN Java Clients.

  5. Configure the REN server.

    See Configuring the REN Server.

  6. Configure REN clusters.

    See Configuring REN Clusters.

  7. Install certificates for local node.

    See Installing Certificates for Local Node.

  8. Generate the client certificate.

    See Generating the Browser Client Certificate

  9. Install PSMCAPI certificates.

    See Installing PSMCAPI Certificates.

  10. Configure an external keystore.

    See Configuring External Keystore in REN Server.

  11. Configuring UQSRV and MCFLOG logs.

    See Configuring UQSRV and MCFLOG logs.