IBM DS8000 User Manual page 89

and trust file are identified by an extension of .jks. Also, provide a
password for each file. The password must be a minimum of six characters
and cannot contain any blanks. Allowable characters are letters A-Z and
a-z, digits 1-9, and special characters - and _ (hyphen and underscore).
16. Click Next to continue the installation process. If you have selected Generate
the self-signed certificates during installation, the Generate Self-Signed
Certificate window is displayed. If you selected Use existing SSL certificates,
the Installation Confirmation window is displayed.
Note: When you select Generate self-signed certificates during installation
and the key files already exist on the system at the specified location,
clicking Next displays a message. The message asks you to designate
whether you want to have the system keep existing application server
certificates if they exist on the location. The default is YES, which
means that you want to keep the existing application server certificates.
17. Complete each of the input fields with the required information. Use the
following as a guide to provide the needed information.
Keystore alias
This is the alias for the self-signed certificate. It uniquely identifies the
certificate within the keystore file. It is a good practice to use a unique
name that is related to the server name.
Key size
Two key sizes are available, 512 and 1024. 1024 is the default.
Common name
This name is the primary, universal identity for the certificate. If your
system contains the secured WebSphere environment, this name must
be valid in the configured user registry.
Organization name
The name of your company
Organization unit (optional)
The name of a department or division within your company.
Remember that you are building a profile for the certificate. As a
security measure the more specific the information the more secure
your system.
Locality (optional)
The city or location where your company resides.
State (optional)
The state or province where your company resides.
Country or region
The two-character designator that identifies the country where your
company is located. Use the pulldown menu to make this selection.
Validity period (days)
Specifies the lifetime of the certificate in days.
The information that you provide is used to build a profile for the certificate.
This information is used during identity processing to ensure validation of
any processing that is occurring. It is part of the security measures that is
used during SSL connectivity.
Click Next to continue, or click Cancel to exit the installation.
Chapter 3. Installing on the Linux operating system
61