Wednesday, September 7, 2016

Adding/Importing the SSL or Signer certificates in IBM WCS

     To Add a Signer certificate.

  1.  Open Server Admin console from RAD.
  2.  Navigate to Secutity and Expand it.
  3.  Then click on  SSL certificate and key management.
  4.  in the console check on Right Side for more options and click on Key stores and certificates
  5.  In that there should be a lot of NODES select for NodeDefaultTrustStore  click on it.
  6.  on the right side check for Additional Properties and in that click on the Signer certificates.
  7.  The Navigated Path should look like this "SSL certificate and key management > Key stores and certificates > NodeDefaultTrustStore > Signer certificates"
  8.  Next to add and delete button find the retrieve from port button
  9.  now gotta fill the mandatory fields  like Host, Port and Alias.
  10.  Host can be for eg "developer.authorize.net" and port try 443 and Alias give any meaning ful name to recognise it. 
  11. Then click on Retrieve Signer Information and wait for the certificate import.
  12. Then apply and save it with out fail.
  13. Restart the server and test.

Important Note:

If you get the error as "ErrorReceived fatal alert: handshake_failure" while adding the certificate follow below steps as a Fix.
  1. Navigate to SSL certificate and key management.
  2. In the Related Items and click on SSL Configurations.
  3. Then click on NodeDefaultSSLSettings.
  4. Find the Additional Properties and click on Quality of protection (QoP) settings.
  5. Here by Default SSL_TLS might be selected.
  6. Change it to  TLSv1.2 or SSL_TLSv2.
  7. It will solve the issue.

No comments:

Post a Comment