Configuring Infrastructure Management Server for 256-bit SSL encryption

To configure the BMC TrueSight Infrastructure Management Server to use 256-bit SSL encryption, follow these steps:

Related topics

Configuring TLSManaging TLS security certificates

  1. Stop the Infrastructure Management Server.
  2. Create the certificate with the .der or .cer format. For example, iascert.cer is generated using certsrv from Windows.
  3. If you cannot access the LDAP or Active Directory server, use JXplorer (an open source LDAP browser) to export the server certificate to a file by following these steps:
    1. Using JXplorer, connect to the LDAP server.
    2. From the menu bar, select Security > Trusted Servers and CAs.
    3. Select the appropriate certificate, and click View Certificate.
    4. In the General tab, click Copy to File.
    5. Select the file location and type the file name for the certificate.
  4. Copy the certificate file to the installationDirectory\TrueSight\pw\jre\lib\security directory.
  5. Ensure that your Windows path contains the installationDirectory\TrueSight\pw\jre\bin path.
  6. Enter the following command specifying the complete certificate and keystore path:
    keytool -importcert -v -trustcacerts -alias LDAP123 -file server.der -keystore pnserver.ks
  7. When prompted, enter the keystore password.
    The default keystore password is get2net.
  8. Back up the following files in the installationDirectory\TrueSight\pw\jre\lib\security directory:
    • local_policy.jar
    • US_export_policy.jar

  9. From the Sun website (http://www.oracle.com/technetwork/java/javase/downloads/index.html), download the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files zip files (UnlimitedJCEPolicyJDK7.zip), which contains the following files:

    • local_policy.jar
    • US_export_policy.jar

    Copy these files into the installationDirectory\TrueSight\pw\jre\lib\security directory.
    These files are required for unlimited encryption strength over a network.

  10. Restart the Infrastructure Management Server.