Importing a certificate into the truststore

To establish secure communications with a remote server (such as a remote LDAP server), you must import a certificate into the BMC Atrium Single Sign-On TrustStore (cacerts.p12). The certificate must be in:

• Printable DER format (file extension .pem)
• Binary DER format (file extensions .cer, .crt, or .der),
• PKCS#12 format.

To import the certificate

1. On the BMC Atrium SSO Admin Console, click Edit Server Configuration. The Server Configuration Editor is displayed.
2. On the Certificates tab, select TrustStore from Certificate Store list.
3. Click Import. The Upload Certificate dialog box is displayed. You can upload the certificate using one of the following options:
   • PEM Encoded Certificate — Use this option to copy the certificate details.
   • HTTPS URL — Enter the host and port from which to capture a certificate.
   • DER/PEM/PKCS12 Encoded File — To import a key pair, upload the PEM-encoded DER/PEM files. To import a chain of certificates, upload the PKCS#12 file. When you select the PKCS#12 file, an additional password field is provided, allowing you to enter the password for the TrustStore.
     
     
     
     
4. Click Upload. After the file is uploaded, the Import Certificate Editor is displayed.

5. Enter the alias for each certificate or key pair that you are uploading to the TrustStore.

   Note

   If the list of certificates contains an existing alias, you can override the existing certificate by providing the same alias for the newly uploaded certificate. You must confirm that the certificate must be replaced.

6. Stop and restart the BMC Atrium Single Sign-On server.

Example of a certificate in DER format

The following example shows a certificate in printable DER format. You can view this certificate by selecting an existing certificate from the list of certificates in the TrustStore and clicking PEM.