Certificates for SSL

This procedure describes how to create and configure your own certificates. Perform a similar procedure for every HCL® Marketing Software you configure to use SSL. If you are configuring the Campaign + Engage integration, see the HCL® Campaign and Engage Integration Guide for HCL Marketing Cloud.

You can obtain or create certificates in several ways. You can create self-signed certificates or you can obtain certificates from a certificate authority (CA).

Self-signed certificates

You can create self-signed certificates.

For C++ components acting as a server, use GSKit to create a .kdb certificate.

The Campaign listener implements SSL using the IBM GSKit library. The GSKit is installed withCampaign and it includes a command-line program called gsk8capicmd_64 that can create a certificate file. For Java components acting as a server, use Java keytool to create a JKS certificate.

Certificates from a certificate authority

You can obtain certificates from a certificate authority (CA).

You can use the GS Kit to create requests that you can then send to a CA to create signed certificates. Or, you can obtain signed certificates entirely provided by the CA.

Consult your certificate authority documentation for instructions on how to obtain a signed certificate.