Policy Manager 12.10 and certificate for https

Aspirant

Policy Manager 12.10 and certificate for https

Hi,

 

Policy Manager 12.10 for Linux adds a secure connection between the server and the managed hosts.  As far as I understand the installation of the FSPMS created a self signed certificate for this connection.

 

Is it possible to use an alternate keystore?  More specifically, can I change somewhere the passwords used for the keystore and the private key?

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Former F-Secure Employee

Re: Policy Manager 12.10 and certificate for https

Hello, 

 

no, currently changing the keystore, or a password to the keystore or the certificate, is not possible. 

What you can do is replace the default self-signed certificate with your own.

 

 

 

View solution in original post

4 REPLIES 4
Highlighted
Former F-Secure Employee

Re: Policy Manager 12.10 and certificate for https

Hello, 

 

no, currently changing the keystore, or a password to the keystore or the certificate, is not possible. 

What you can do is replace the default self-signed certificate with your own.

 

 

 

View solution in original post

tle
Scholar

Re: Policy Manager 12.10 and certificate for https

Is there a guide somewhere on HOW TO CHANGE THE CERTIFICATES? PM 12.10 Admin guide did not help at all, there's not even a mention about them in the whole manual.. very poorly documented.

Novice

Re: Policy Manager 12.10 and certificate for https

Same here. i'd also would like to see a sort of manual on how to create a keystore with a signed cert and use that for PMS. Reading through manuals does not shed a light on what the requirements are so pms picks up the key from the store

Former F-Secure Employee

Re: Policy Manager 12.10 and certificate for https

Fellows, 

 

please find the attached  instruction on how to provide a custom certificate to the Policy Manager Server. Please note, though, that this instruction describes the specific case of importing the certificate in PKCS12  format. For more information, please see the Oracle's documentation on 'keytool' utility: 

http://docs.oracle.com/javase/6/docs/technotes/tools/solaris/keytool.html