IBM Support

Enabling SSL for IBM Navigator for i

Technote (troubleshooting)


Problem(Abstract)

After installing HTTP Group ptf from December 2016, you will need to manually configure IBM Navigator for i for SSL.

Resolving the problem

You can enable https by either using the Keystore created by Level 1 Console or by using Digital Certificate Manager.

  • - Prepare


Install latest DG1 PTF Group to ensure the option for Admin2 is available on Web Admin.


  • - Enable https via Web Admin_Using Key Store by L1C

      * Note: use this option if you want IBM to create your cert.
      1. Log on //hostname:2001/HTTPAdmin using your usr profile of IBM i.
      Note: you could access it through L1C welcome page -> IBM i Tasks Page -> IBM Web Administration for i

      2. Click Manage -> Application Servers-> select 'Admin2' on Servers list

      3. Click 'Configure SSL'

      4. Click Next on Step 1


      5. Configure port/protocol and whether to enable http also on Step 2

      6. Configure inav_key.jks as the keystore on Step 3

      7. Specify 'password' as the Password for the keystore on Step 4

      8. Select 'Issue a new-self signed certificate' on Step 6


      9. Select the restart server style you like on Step 8


      10. Confirm the information and click Finish on the last step


    [
    • - Enable https Using DCM to Create your Certificate


      *Note: Use this option if you want to assign your own certificate to IBM Key Management.
      (some companies require a well known cert)


    [
    • - Use DCM to Create a Certificate


      1. Log on //hostname:2001/QIBM/ICSS/Cert/Admin/qycucm1.ndm/main0 using your usr profile of IBM i
      Note: you could access it through L1C welcome page -> IBM i Tasks Page -> Digital Certificate Manager

      2. Click 'Select a Certificate Store' -> Select '*SYSTEM' -> Click 'Continue'



      3. Input your password for the *SYSTEM certificate store. If it's forgotten, click 'Reset Password' to reset a new one -> Click 'Continue'



      Then the left menu would be refreshed to launch the certificate related info of this *SYSTEM certificate store as blow


      4. Click 'Create Certificate' -> Select 'Server or client certificate' -> Click 'Continue'

      5. Select 'Local CA' -> Click 'Continue'


      6. Give input for the required option -> Click 'Continue'




      7. Select all below applications to append the certificate -> click 'Append'





      Then, the certificate newly created would be appended successfully.



      • - Enable https using Certificate created above via Web Admin


      1. Log on //hostname:2001/HTTPAdmin using your usr profile of IBM i.
      Note: you could access it through L1C welcome page -> IBM i Tasks Page -> IBM Web Administration for i

      2. Click Manage -> Application Servers-> select 'Admin2' on Servers list

      3. Click 'Configure SSL'

      4. Click Next on Step 1


      5. Configure port/protocol and whether to enable http also on Step 2

      6. Select 'Use DCM SYSTEM store' on Step 3 -> click 'Next'


      7. Specify the password of SYSTEM store assigned on above steps using DCM on Step 4 -> click 'Next'

      8. Select 'Select existing certificate from the keystore' on Step 6 and select 'FORHTTPS_1' created above using DCM -> click 'Next'



      9. Select 'No trust certificate to import' on Step 7 -> click 'Next'



      10. Select the restart server style you like on Step 8


      11. Confirm the information and click Finish on the last step


      Then server would be restarted and user should connect to https via '//hostname:2010' (note:this will require that the http admin server is also secure)

      If http admin is not secured the user could connect to https via '//hostname:2005/ibm/console/logon.jsp' but note this redirect could be changed at any time.

      • - Disable SSL


      1. Click 'Disable SSL' on Web Admin and follow the steps to disable port 2005

    Cross reference information
    Segment Product Component Platform Version Edition
    Operating System IBM i 7.3
    Operating System IBM i 7.2
    Operating System IBM i 7.1

    Document information

    More support for: IBM i
    Basic System Environment Functions (BSEF)

    Software version: 7.1, 7.1.0, 7.2, 7.2.0, 7.3

    Operating system(s): IBM i

    Reference #: N1021726

    Modified date: 16 January 2017


    Translate this page: