Versions Compared

Version Old Version 2 New Version 3
Changes made by

Aaron Fistler

Aaron Fistler

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Secure HTTPS traffic for the BRMS web interface requires a digital certificate. A digital certificate provides two functions:

...

Expand
titleCreating the *SYSTEM certificate store

  1. In a web browser, enter http://mysystem:2001/dcm, where mysystem is the host name or IP address of the system. This opens IBM Digital Certificate Manager for i.

  2. Log in with an IBM i profile with sufficient authority.

  3. Click on Create Certificate Store on the left-hand navigation menu

  4. On the right-hand side of the page select *SYSTEM.

Image Modified
Info

Note: If the *SYSTEM option is not available in the list, it indicates that there is a *SYSTEM store already created on this system, and these steps have already been performed.

  1. Create a password for the *SYSTEM store and click Create.

Info

Note: The password is case-sensitive. It is recommended not to use special characters. This password is not attached to a user profile and it will not lock you out of the system after too many attempts.

Procedure

After the *SYSTEM certificate store is created, the procedure consists of the following steps:

...

Expand
titleCreating the Local Certificate Authority

  1. In a web browser, enter http://mysystem:2001/dcm, where mysystem is the host name or IP address of the system. This opens IBM Digital Certificate Manager for i.

  2. Log in with an IBM i profile with sufficient authority.

  3. Click on Create Certificate Store on the left-hand navigation menu.

  4. On the right-hand side of the page select Local CA.

    Image Modified
Info

Note: If the Local CA option is not available in the list, it indicates that there is already a local certificate authority on this system, and these steps have already been performed.

  1. Create a password for the Local CA store and click Create.

Info

Note: The password is case-sensitive. It is recommended not to use special characters. This password is not attached to a user profile and it will not lock you out of the system after too many attempts.

Result

The *SYSTEM certificate store is created on the node.

Expand
titleCreating a Certificate Authority (CA) Certificate

  3. Image Modified

Expand
titleCreating a Self-Signed Certificate

  3. Image Modified

    2. Image Modified

  5. Image Modified

1.b Importing a Trusted Certificate

...

Expand
titleAssigning the Certificate to the BRMS Webserver

  3. Image Modified

    2. Image Modified

  5. Image Modified

  6. Image Modified

3. Enabling the secure HTTPS server

...