Installation Instructions for IBM WebSphere using IKEYMAN GUI (Version 7)

General Information ID:    INFO230    Updated:    09/10/2015

Description

This document provides instructions for installing SSL Certificates for IBM Websphere using the IKEYMAN GUI. If you are unable to use these instructions for your server, Symantec recommends that you contact IBM.

NOTE: Keep in mind that to successfully use the certificate sent by Symantec, the Intermediate CA certificates and your SSL certificate must be imported into same key file from which the certificate request was generated. Ikeyman gives errors when you try to import the Symantec certificate into a key file that does not contain the certificate request.
 
NOTE: To install the SSL Certificate by using the iKeycmd command line, follow the steps from  this link: SO9282
 

Step 1: Download the Symantec Intermediate CA Certificate

  1. Download the Intermediate CA certificate from this link: INFO657
    Select the appropriate Intermediate CA certificate for your SSL Certificate type.|
    NOTE: To check which certificate type you have purchased, follow the steps from this link: SO13499
  2. Copy the Intermediate CA certificate and paste it on a Notepad.
  3. Make sure there are 5 dashes to either side of the BEGIN CERTIFICATE and END CERTIFICATE and that no white spaces, extra line breaks or additional characters have been inadvertently added.
  4. Save the file as intermediate.cer


Step 2: Install Symantec Intermediate CA Certificate

  1. Start the key management utility (iKeyman):

    On Windows: Go to the start UI and select Start Key Management Utility

            On AIX, Linux or Solaris: Type ikeyman on the command line
 

  1. Open the key database file that was used to create the certificate request.

            

  1. Enter the password, then click OK.

            

  1. Select Signer Certificates, then click Add.

            

  1. Click Files of Type and select All Files.
  2. Enter a file name and location for intermediate.cer digital certificate or click Browse to select a file name and location.

            

  1. Click OK.
  2. Enter a label for importing certificate, for example: Intermediate CA

            

  1. Click OK
  2. The Signer Certificates field displays the label of the signer certificate you added.


Step 3: Obtain the SSL Certificate 

  1. The Symantec certificate will be sent by email. The certificate is included as an attachment (Cert.cer) and it is also imbedded in the body of the email.
  2. Copy and paste the certificate into a text file using Vi or Notepad
    The text file should look like:
    -----BEGIN CERTIFICATE-----
        
            [encoded data]

    -----END CERTIFICATE-----
     
  3. Make sure there are 5 dashes to either side of the BEGIN CERTIFICATE and END CERTIFICATE and that no white spaces, extra line breaks or additional characters have been inadvertently added.

    NOTE: You can also download the certificate from your Symantec Trust Center account by following the steps from this link: SO8061
    When downloading the certificate, please select X.509 as a certificate format and copy only the End Entity Certificate
     
  4. Save the file with extension .cer


Step 4: Install the SSL Certificate

  1. Start the key management utility (iKeyman): 

    On Windows: Go to the start UI and select Start Key Management Utility

             On AIX, Linux or Solaris: Type ikeyman on the command line
 

  1. Choose Open from the Key Database File menu. Click Key database type, and select CMS.

            

  1. Click Browse to navigate to the directory containing the key database files. 
  2. Select the key database file to which you want to add the certificate. For example, key.kdb. 
  3. Click Open
  4. In the Password Prompt window, type the password you set when you created the key database and then click OK.

            

  1. Select the Personal Certificates view. 

            

  1. Click Receive

            

  1. Click Browse to select the name and location of the certificate file name.

            

  1. Click OK
  2. To verify if your certificate is installed correctly, use the Symantec Installation Checker
     

IBM Support

         For more information, contact IBM
 

 

Contact Support

Find Answers