IBM Content Navigator: You must import the root certificate authority to connect to IBM Content Manager through SSL
If IBM Content Manager is running on an Oracle database, you must import the root certificate authority from the IBM Content Manager server to the IBM Content Manager server to enable communication through SSL.
If you enable SSL communication between IBM Content Navigator and an IBM Content Manager system that is running on an Oracle database, you must import the root certificate authority from the IBM Content Manager server to the IBM Content Navigator server in the following locations:
- In the WebSphere Application Server trust store, which you can access from the WebSphere Application Server administrative console.
For example, on WebSphere Application Server Version 8, go to Security > SSL certificate and key management from the Related Items section, click Key stores and certificates. Click NodeDefaultTrustStore. In the Additional Properties section click Signer Certificates.
- In the WebSphere Application Server JDK trust store, which you can access from the command line by running the keytool command.
For example, run the following command from the command prompt:
Keytool: C:\Program Files\IBM\WebSphere\AppServer\java\jre\bin\keytool.exe
WebSphere Java Trust Store: C:\Program Files\IBM\WebSphere\AppServer\java\jre\lib\security\cacerts
You can complete this task before or after you deploy IBM Content Navigator.