IBM DS8000 User Manual page 68

12. Click Next to continue the installation process. If you have selected Generate
13. Complete each of the input fields with the required information. Use the
40
DS8000 User's Guide
a. Designate whether you want to generate a new SSL certificate by selecting
Generate the self-signed certificates during installation. This is the most
likely selection when you are installing DS Storage Manager for the first
time. You can also select Use existing SSL certificates. This choice is most
likely made when the key files already exist and you do not want to
generate new key files.
b. Complete the rest of the fields on the window. Provide the fully qualified
path to the key file and trust file by using the Browse button. The key file
and trust file are identified by an extension of .jks.
c. If you are creating new certificates, create a password for each file. The
password must be a minimum of six characters and it cannot contain any
blanks. Allowable characters are letters A - Z and a - z, digits 1 - 9, and
special characters - and _ (hyphen and underscore). Supply the existing
password if you are using an existing SSL certificate.
Record the location and passwords for the SSL certificates so that you can
refer to them in the future if necessary.
the self-signed certificates during installation, the Generate Self-Signed
Certificate window is displayed. If you selected Use existing SSL certificates,
the Installation Confirmation window is displayed.
Note: When you select Generate self-signed certificates during installation
and the key files already exist on the system at the specified location,
clicking Next causes a message to display. It asks you to designate
whether you want to have the system keep existing application server
certificates if they exist on the location. The default is YES which keeps
the existing application server certificates.
following as a guide to provide the needed information.
Keystore alias
This is the alias for the self-signed certificate. It uniquely identifies the
certificate within the keystore file. It is a good practice to use a unique
name related to the server name.
Key size
Two key sizes are available: 512 and 1024. 1024 is the default.
Common name
This name is the primary, universal identity for the certificate. If your
system contains the secured WebSphere environment, this name must
be valid in the configured user registry.
Organization name
The name of your company.
Organization unit (optional)
The name of a department or division within your company.
Remember that you are building a profile for the certificate. As a
security measure the more specific the information the more secure
your system.
Locality (optional)
The city or location where your company resides.
State (optional)
The state or province where your company resides.