SSL process simplified – IBM HTTP Server using ikeyman

  • install IBM HTTP Server & Plugins
  • run ikeyman (IBM Key Manager)
  • add CA root & intermediate certificates to signer certificates
  • create certificate personal certificate signing request
  • forward csr to CA
  • add signed certificate to personal certificates
  • configure HTTP Server httpd.conf

IBM WebSphere Proxy

SSL process simplified – WebSphere HTTP proxy

  • export signed certificate from IHS using ikeyman
  • import certificate into WAS CellDefaultkeystore
  • the imported certificate contains ALL ROOT and IM certificates
  • add CA root & intermediate certificates to CellDefaulttruststore
  • configure HTTP endpoints