OnDemand User Group

Support Forums => Content Navigator => Topic started by: Mehmet S Yersel on March 22, 2019, 06:53:34 AM

Title: ICN Certificate
Post by: Mehmet S Yersel on March 22, 2019, 06:53:34 AM

Hi All,

We have an ICN server with WAS 9.0.0.6 and ICN 3.0.4 running on Red Hat Linux 7 x64.

We are trying to create and install a self signed certificate. Is there a documentation somewhere to describe how it is done?
I appreciate it if you can point me in the right direction.

Thanks,
Mehmet

Title: Re: ICN Certificate
Post by: Ed_Arnold on March 22, 2019, 09:33:07 AM

Hello Mehmet:

I have a procedure here:

http://www.odusergroup.org/forums/index.php?topic=1938.msg7295#msg7295 (http://www.odusergroup.org/forums/index.php?topic=1938.msg7295#msg7295)

Yes, it's a different operating system, but hopefully you can use it as an outline of the steps required.

Ed

Title: Re: ICN Certificate
Post by: Mehmet S Yersel on April 11, 2019, 06:08:51 PM

Hi Ed -

Thank you for the information you have provided. I haven't yet started implementing them, but I will need the steps you have detailed for securing mainframe to ICN connection  ;D

On the other hand, I was able to complete the SSL configuration for our 2 ICN environments - not the most straight forward process due to the exceptions I encountered along the way. Here are the high level steps if anyone is going through the same requirement of providing secure connection to ICN:

- Install IBM HTTP Server with Java
- Install WebSphere Plugins with Java
- Create Self signed Certificate
- Get the certificate issued by your CA
- install your signed certificates - root & intermediate - on the HTTP server
- open x443 port and make sure HTTPS works from the secure port
- once HTTPS works, use /navigator and that too should work

Along the way you may get a lot of errors, firewall issues and you may need to do a lot of research to move past each issue.

Good luck,
Mehmet
-