IBM DS8000 User Manual page 102

16. Click Next to continue the installation process. If you selected Generate the
17. Complete each of the input fields with the required information. Use the
18. Click Next to continue, or click Cancel to exit the installation.
74
DS8000 User's Guide
c. If you are creating new certificates, create a password for each file. The
password must be a minimum of six characters and it cannot contain any
blanks. Allowable characters are letters A - Z and a - z, digits 1 - 9, and
special characters - and _ (hyphen and underscore). Supply the existing
password if you are using an existing SSL certificate. Record the location
and passwords for the SSL certificates so that you can refer to them in the
future if necessary.
Self-signed Certificates during installation, the Generate Self-Signed Certificate
window is displayed. If you selected Use Existing SSL certificates, the
Installation Confirmation window is displayed. When you select Generate
Self-signed Certificates during installation and the key files already exist on
the system at the specified location, clicking Next causes a message to display.
It asks you to designate whether you want to have the system keep existing
application server certificates if they exist on the location. The default is YES
which keeps the existing application server certificates.
following as a guide to provide the needed information:
Keystore alias
This is the alias for the self-signed certificate. It uniquely identifies the
certificate within the keystore file. It is a good practice to use a unique
name related to the server name.
Key size
Two key sizes are available, 512 and 1024. 1024 is the default.
Common name
This name is the primary, universal identity for the certificate. If your
system contains the secured WebSphere environment, this name must
be valid in the configured user registry.
Organization name
The name of your company.
Organization unit (optional)
The name of a department or division within your company.
Remember that you are building a profile for the certificate. As a
security measure the more specific the information the more secure
your system.
Locality (optional)
The city or location where your company resides.
State (optional)
The state or province where your company resides.
Country or region
The two-character designator that identifies the country where your
company is located. Use the pull-down menu to make this selection.
Validity period (days)
Specifies the lifetime of the certificate in days.
The information that you provide is used to build a profile for the certificate.
This information is used during identity processing to ensure validation of
any processing that is occurring. It is part of the security measures that are
used during SSL connectivity.