Exchanging certificates between WebSphere proxy servers

If you are configured to use TLS between the SIP Edge proxy and the Sametime® SIP Proxy/Registrar, then you need to exchange certificates between two servers.

About this task

These instructions are for the default certificate. This certificate is meant for internal communications (not meant to act as a CA). Exchange the root certificates between WebSphere® proxy servers so that you can change the personal certificate without any impact on communication between the SIP Edge proxy and the SIP Proxy/Registrar.

Procedure

  1. Follow these instructions to extract the root certificate from the WebSphere proxy server that operates with the SIP Edge proxy cluster:
    1. In the WebSphere Application Server administrative console hosting the WebSphere proxy server that operates with the SIP Edge proxy cluster, click Security > SSL certificate and key management > Key stores and certificates.
    2. Select CellDefaultTrustStore.
    3. Click Signer certificates.
    4. Select the root certificate.
    5. Click Extract.
    6. Specify the file name and click OK.
    7. Copy the extracted certificate to a location from which the WebSphere proxy server that operates with the SIP Proxy/Registrar cluster can retrieve the file.
  2. Follow these instructions to import the SIP Edge proxy's root certificate into the SIP Proxy/Registrar:
    1. In the WebSphere Application Server Integrated Solutions Console hosting the WebSphere proxy that operated with the SIP Proxy/Registrar, click Security > SSL certificate and key management > Key stores and certificates.
    2. Click Security > SSL Certificates and key management > Key stores and certificates > CellDefaultTrustStore > Signer certificates .
    3. Click Add.
    4. In the Alias field, type a description for the certificate (for example, sip-edge-proxy-root-cert). In the File name field, type the path to the certificate file.
    5. Click OK.
    6. Click Save.
    7. Stop and restart all WebSphere Application Server processes hosting the SIP Proxy/Registrar.
    Note: The instructions for importing the SIP Proxy/Registrar's root certificate into the SIP Edge proxy server are similar.