Hi and sorry for the delay in replying.
Well, yes, you "kind of" need to install the certificate on the ICN machine, which is the CMOD client in this case:
Both ondemand.kdb and ondemand.sth files need to be placed on the workstation where the Content Manager OnDemand clients are installed. Download both files to the config subdirectory under the client installation directory.
There seems to be some information missing on the Linux page, but I suggest you look at the full procedure starting with "To create a CA-signed digital certificate, do the following steps:". For example, the description for Windows-based OnDemand seems to keep all information in one page:
https://www.ibm.com/support/knowledgecenter/SSEPCD_9.5.0/com.ibm.ondemand.installmp.doc/dodww067.htmbut I suppose the description for AIX or Solaris are more similar to Linux, technically.
I suggest you read through the entire procedure in the Windows page above, then you check out that you have correctly executed all the steps in creating and verifying your CA certificate:
https://www.ibm.com/support/knowledgecenter/en/SSEPCD_9.5.0/com.ibm.ondemand.installmp.doc/dodlx152.htmand when that is done, complete the CA cert installation for Linux:
https://www.ibm.com/support/knowledgecenter/SSEPCD_9.5.0/com.ibm.ondemand.installmp.doc/dodlx120.htmand make sure the key files are installed on the ICN machine.
As usual
, more info can usually be found when checking the same documentation page for another OS/platform.
I hope this helps you - please let us all know how you managed once you get it to work!