Creating a new keystore

The keystore file is a key database file that contains both public keys and private keys. Public keys are stored as signer certificates while private keys are stored in the personal certificates. A Secure Sockets Layer (SSL) configuration references keystore configurations during WebSphere® Application Server runtime. Whether a keystore file was created by another keystore tool or saved from a previous configuration, the file must be part of a keystore configuration object. You can create a keystore configuration for the existing keystore object.

Before you begin

Expected state: the deployment manager, node agents, and servers are started.

Procedure

  1. Stop all Sametime® Gateway Servers, but leave the deployment manager and node agents running.
  2. Using the Integrated Solutions Console, click Security > SSL certificate and key management > Key stores and certificates.
  3. Click New.
  4. Type a name in the Name field that specifies the unique name to identify the keystore; for example: STGWKS.
  5. In the Path field, specify this location for the keystore file:

    ${CONFIG_ROOT}/STGWKS.p12.

  6. Type a password in the Password field. The password is used to protect the keystore.
  7. Type the keystore password again in the Confirm Password field to confirm the password.
  8. Select PKCS12 from the list. The type that you select is for the keystore file that you specified in the Path field.
  9. Click Apply and Save.
  10. Ensure that all of the nodes in the cluster are started.
    1. In the deployment manager's Integrated Solutions Console, click System Administration > Node agents.
    2. Start any node agent that is not running.
  11. Synchronize all the nodes.
    1. In the deployment manager's Integrated Solutions Console, click System Administration > Nodes.
    2. Select all available nodes and click Full Resynchronize.