You must import the certificates into the Common Component truststore to enable SSL communication between the external web server and Ops Center Automator.
- BNA
- Brocade FC switch
- DCNM
- ServiceNow
- Other web service connections
In Windows OS, use the hcmds64keytool command. For Linux OS, use the standard keytool. To import the certificate in Java, ensure that the truststore password includes six or more characters. In addition, ensure that the new alias name does not conflict with an existing alias name.
For Windows OS:
Common-Component-installation-folder\bin\hcmds64keytool -import -alias alias-name -keystore Common-Component-installation-folder\uCPSB11 \hjdk\jdk\lib\security\jssecacerts -storepass truststore-password -file certificate-file -storetype JKS
Restart the services by running the hcmds64srv command.
For Linux OS:
Common-Component-installation-directory/uCPSB11/jdk/bin/keytool -import -alias alias-name -keystore Common-Component-installation-directory/uCPSB11/hjdk/jdk/lib/security/jssecacerts -storepass truststore-password -file certificate-file -storetype JKS
Restart the services by running the hcmds64srv command.
Additional guidelines
- For additional information on the security settings for another product, see the associated product documentation.
- To obtain server certificates, see the associated product documentation for information on accessing server certificates.
- After upgrading DCNM, the server certificate is initialized. You must do the steps described in "Restoring the certificates after an upgrade" in the Cisco DCNM Installation and Upgrade Guide for SAN Deployment.
- If you use DCNM 11.5, create a certificate by specifying an appropriate hostname to Common Name by following the steps described in "Certificates" in the Cisco DCNM Installation and Upgrade Guide for SAN Deployment.
- If you use a Brocade FC switch, complete the SSL settings by following the steps described in "Managing the Security Certificates Using the secCertMgmt Command" in the Brocade Fabric OS Administration Guide.